Your message dated Tue, 30 Nov 2010 11:32:36 +0000
with message-id <e1pnoro-00024b...@franck.debian.org>
and subject line Bug#604042: fixed in opendnssec 1.1.3-2
has caused the Debian Bug report #604042,
regarding Purging opendnssec-common causes dpkg (or at least aptitude) to break
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
604042: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=604042
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: opendnssec
Version: 1.1.3-1
Severity: critical
Tags: patch
Justification: breaks unrelated software

The opendnssec-common postrm script use same order as postinst script,
causing the opendnssec acount to be removed before undoing statoverride.

Additionally undoing of homedir statoverride is missing.

On top of this, dpkg-statoverride is silences so the fatal warnings are
not seen.


Here's the fix:

--- opendnssec-common.postrm.orig
+++ opendnssec-common.postrm
@@ -4,19 +4,18 @@
 set -e
 
 unset_perms() {
-    dpkg-statoverride --remove "$1" >/dev/null 2>/dev/null || true
+    dpkg-statoverride --remove "$1" || true
 }
 
 case "$1" in
     purge)
 
-       deluser --quiet opendnssec > /dev/null || true
-
        unset_perms /etc/opendnssec
 
        for dir in tmp signconf unsigned signed db; do
            unset_perms /var/lib/opendnssec/$dir
        done
+       unset_perms /var/lib/opendnssec
 
        for conf in conf.xml kasp.xml zonefetch.xml zonelist.xml; do
            # unset dpkg-statoverride permissions
@@ -37,6 +36,8 @@
            fi
        done
 
+       deluser --quiet opendnssec > /dev/null || true
+
     ;;
 
     remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)



Regards,

 - Jonas

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.36-trunk-amd64 (SMP w/2 CPU cores)
Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages opendnssec depends on:
ii  libhsm-bin                    1.1.3-1    library for interfacing PKCS#11 Ha
ii  opendnssec-enforcer           1.1.3-1    tool to prepares DNSSEC keys (comm
ii  opendnssec-enforcer-sqlite3   1.1.3-1    tool to prepares DNSSEC keys (sqli
ii  opendnssec-signer             1.1.3-1    daemon to sign DNS zone files peri

Versions of packages opendnssec recommends:
ii  opendnssec-auditor            1.1.3-1    tool to audit DNS signed zones acc

Versions of packages opendnssec suggests:
ii  softhsm                       1.1.4-5    a cryptographic store accessible t

-- no debconf information



--- End Message ---
--- Begin Message ---
Source: opendnssec
Source-Version: 1.1.3-2

We believe that the bug you reported is fixed in the latest version of
opendnssec, which is due to be installed in the Debian FTP archive:

libhsm-bin_1.1.3-2_amd64.deb
  to main/o/opendnssec/libhsm-bin_1.1.3-2_amd64.deb
libhsm-dev_1.1.3-2_amd64.deb
  to main/o/opendnssec/libhsm-dev_1.1.3-2_amd64.deb
libhsm0_1.1.3-2_amd64.deb
  to main/o/opendnssec/libhsm0_1.1.3-2_amd64.deb
opendnssec-auditor_1.1.3-2_all.deb
  to main/o/opendnssec/opendnssec-auditor_1.1.3-2_all.deb
opendnssec-common_1.1.3-2_all.deb
  to main/o/opendnssec/opendnssec-common_1.1.3-2_all.deb
opendnssec-enforcer-mysql_1.1.3-2_amd64.deb
  to main/o/opendnssec/opendnssec-enforcer-mysql_1.1.3-2_amd64.deb
opendnssec-enforcer-sqlite3_1.1.3-2_amd64.deb
  to main/o/opendnssec/opendnssec-enforcer-sqlite3_1.1.3-2_amd64.deb
opendnssec-enforcer_1.1.3-2_all.deb
  to main/o/opendnssec/opendnssec-enforcer_1.1.3-2_all.deb
opendnssec-signer-tools_1.1.3-2_amd64.deb
  to main/o/opendnssec/opendnssec-signer-tools_1.1.3-2_amd64.deb
opendnssec-signer_1.1.3-2_all.deb
  to main/o/opendnssec/opendnssec-signer_1.1.3-2_all.deb
opendnssec_1.1.3-2.debian.tar.gz
  to main/o/opendnssec/opendnssec_1.1.3-2.debian.tar.gz
opendnssec_1.1.3-2.dsc
  to main/o/opendnssec/opendnssec_1.1.3-2.dsc
opendnssec_1.1.3-2_all.deb
  to main/o/opendnssec/opendnssec_1.1.3-2_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 604...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ondřej Surý <ond...@debian.org> (supplier of updated opendnssec package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 30 Nov 2010 12:15:58 +0100
Source: opendnssec
Binary: opendnssec-auditor opendnssec-common opendnssec opendnssec-enforcer 
opendnssec-enforcer-mysql opendnssec-enforcer-sqlite3 opendnssec-signer 
opendnssec-signer-tools libhsm-bin libhsm-dev libhsm0
Architecture: source all amd64
Version: 1.1.3-2
Distribution: unstable
Urgency: high
Maintainer: Ondřej Surý <ond...@debian.org>
Changed-By: Ondřej Surý <ond...@debian.org>
Description: 
 libhsm-bin - library for interfacing PKCS#11 Hardware Security Modules
 libhsm-dev - library for interfacing PKCS#11 Hardware Security Modules
 libhsm0    - library for interfacing PKCS#11 Hardware Security Modules
 opendnssec - dependency package to install full OpenDNSSEC suite
 opendnssec-auditor - tool to audit DNS signed zones according to local policy
 opendnssec-common - common configuration files for OpenDNSSEC suite
 opendnssec-enforcer - tool to prepares DNSSEC keys (common package)
 opendnssec-enforcer-mysql - tool to prepares DNSSEC keys (mysql backend)
 opendnssec-enforcer-sqlite3 - tool to prepares DNSSEC keys (sqlite3 backend)
 opendnssec-signer - daemon to sign DNS zone files periodically
 opendnssec-signer-tools - set of tools used by OpenDNSSEC to sign zone files
Closes: 604042 605161
Changes: 
 opendnssec (1.1.3-2) unstable; urgency=high
 .
   * Reorder unsetting permission and deleting the user account
     (Closes: #604042)
   * Fix insecure PYTHONPATH (Closes: #605161)
Checksums-Sha1: 
 98ec059d7219575bbf2a9769a6a44cd65d2d4f5a 1596 opendnssec_1.1.3-2.dsc
 e07593c2d8783addc832bde709d5fed1341e0211 14808 opendnssec_1.1.3-2.debian.tar.gz
 5ec4136060221f0684763f69474fdb2c56fc5cf6 58876 
opendnssec-auditor_1.1.3-2_all.deb
 7500609bb7ec14e240fedb9000496502e3d94895 25434 
opendnssec-common_1.1.3-2_all.deb
 1b2bd57b264497095740d4e8d3631ecc0a5a876b 5604 opendnssec_1.1.3-2_all.deb
 0f527a26df71da9f1bb73f115c102f0c938648ce 13572 
opendnssec-enforcer_1.1.3-2_all.deb
 d55f3b1992f485a1a8affdceb26345d926cd1f9c 139408 
opendnssec-enforcer-mysql_1.1.3-2_amd64.deb
 cec93c52d6ce10485de680f471ce086d0286a0b6 124890 
opendnssec-enforcer-sqlite3_1.1.3-2_amd64.deb
 395c5df4d8e019e17a575380d77a231a88cd1a7c 36048 
opendnssec-signer_1.1.3-2_all.deb
 fd2f522e336c07f696f27a34c09f9c5147360a97 81212 
opendnssec-signer-tools_1.1.3-2_amd64.deb
 cb0628bfe2ead7142c1fe8611e28a8ef93b3ba69 17776 libhsm-bin_1.1.3-2_amd64.deb
 1d86732481aa83aa57a765f5f26b86a7248983df 27094 libhsm-dev_1.1.3-2_amd64.deb
 05eb135b5d034a4ef358044eebd87bd6dbb18674 22630 libhsm0_1.1.3-2_amd64.deb
Checksums-Sha256: 
 bc18058502b6df0a748da605643ba3bdb242d1a0108dc73d78bd7279a54d0dfa 1596 
opendnssec_1.1.3-2.dsc
 4c015b422c53228f122a0ddbad4bf860ebe663a27272164becf6ae6dcad6e740 14808 
opendnssec_1.1.3-2.debian.tar.gz
 47a018aee95c8ba1f21e947daea80cec4a5d3e43dfd1b8912416c1ed72073bec 58876 
opendnssec-auditor_1.1.3-2_all.deb
 4e9c1b1c2c388abe8816d95e0c6ebdca314f87e0afbf77df6abb57fd9b9a2ad0 25434 
opendnssec-common_1.1.3-2_all.deb
 38fc9aa38bc2f23b690a2428e254a3b4fa9295cebcd5642c296512c7af01d2c4 5604 
opendnssec_1.1.3-2_all.deb
 17247a15ebea5b7641e1848c63389595246df8fca3639085c12c926d7b2546d4 13572 
opendnssec-enforcer_1.1.3-2_all.deb
 a83d43358227ea9fb634611081b7103d75583c579139b9e9e4ce097b3e00e062 139408 
opendnssec-enforcer-mysql_1.1.3-2_amd64.deb
 c7c55e8a1d298304769d85e8ed1c0dd4e6893dfcf1efd8ff852df8ef29703c76 124890 
opendnssec-enforcer-sqlite3_1.1.3-2_amd64.deb
 11592aff12dc041dd255ed4de67fac3347b76539802515d685ffcc713c5fb066 36048 
opendnssec-signer_1.1.3-2_all.deb
 5256c8d5297152feb847728f5a318daa787651dc7cc14a9f106519bfed7df08e 81212 
opendnssec-signer-tools_1.1.3-2_amd64.deb
 ec53ad3d7098ad27e9de57a25f5aae53e04089779ca3cd3c3641ce711e1ab27e 17776 
libhsm-bin_1.1.3-2_amd64.deb
 19a59366b087ca3de6d7a923e7e0d51f16858e2f7e4be4924644d44ec6cdab49 27094 
libhsm-dev_1.1.3-2_amd64.deb
 e32bfd879853b6a0ad669a3623ba935efcf087f24067e796b599b9f796b15805 22630 
libhsm0_1.1.3-2_amd64.deb
Files: 
 a76152ff8a45868a236b34286641fa99 1596 admin extra opendnssec_1.1.3-2.dsc
 03396d06519ccaab7d0be28201df0855 14808 admin extra 
opendnssec_1.1.3-2.debian.tar.gz
 57ad938388d56d90f3efae75a1840311 58876 admin extra 
opendnssec-auditor_1.1.3-2_all.deb
 5f84b92e0bc69d91e217270ec6a274b8 25434 misc extra 
opendnssec-common_1.1.3-2_all.deb
 1c9fe9585aed24e64b7623fbb5f68d6c 5604 misc extra opendnssec_1.1.3-2_all.deb
 e6fcc31cfda533261b44ca4070a387eb 13572 admin extra 
opendnssec-enforcer_1.1.3-2_all.deb
 ddaa38cb077c224971e4b768ac87e6bf 139408 admin extra 
opendnssec-enforcer-mysql_1.1.3-2_amd64.deb
 800a0fcbb815314a1c4e52c211366d31 124890 admin extra 
opendnssec-enforcer-sqlite3_1.1.3-2_amd64.deb
 a75ea79f96037528496933d59633a7b1 36048 admin extra 
opendnssec-signer_1.1.3-2_all.deb
 f0157b40eb03406c35b62185259d995c 81212 admin extra 
opendnssec-signer-tools_1.1.3-2_amd64.deb
 b1caa411ab1aba4581eaf2ab7e7d191a 17776 misc extra libhsm-bin_1.1.3-2_amd64.deb
 3478e76d445c430516155ba3d57c7888 27094 libdevel extra 
libhsm-dev_1.1.3-2_amd64.deb
 ee10ef321651e8df3ddf2be3070e87c0 22630 libs extra libhsm0_1.1.3-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkz03m0ACgkQ9OZqfMIN8nNZ7QCfUz3lhpkDVaRwvptoaYrEBkN/
LDAAn3n0QN7Nq+cTHan+K1pZUeaC5s+a
=r9v5
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to