Your message dated Fri, 18 Jun 2021 12:23:38 +0000
with message-id <e1ludx8-0007p1...@fasolo.debian.org>
and subject line Bug#932501: fixed in squid-deb-proxy 0.8.15+nmu1
has caused the Debian Bug report #932501,
regarding squid-deb-proxy: daemon does not start due to the conf file not being
allowed by apparmor
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
932501: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932501
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: squid-deb-proxy
Severity: important
Tags: patch
Dear Maintainer,
squid-deb-proxy fails to start due due to the conf file not being allowed by
apparmor:
Jul 20 16:28:48 Tardis squid: FATAL: Unable to open configuration file:
/etc/squid-deb-proxy/squid-deb-proxy.conf: (13) Permission denied
Jul 20 16:28:48 Tardis squid-deb-proxy[10170]: failed!
Jul 20 16:35:30 Tardis squid-deb-proxy[10276]: Stopping Squid Deb HTTP Proxy:
squid-deb-proxy.
Jul 20 16:35:30 Tardis systemd[1]: squid-deb-proxy.service: Succeeded.
Jul 20 16:35:30 Tardis kernel: [4157921.317296] audit: type=1400
audit(1563597330.601:32): apparmor="DENIED" operation="open"
profile="/usr/sbin/squid" name="/etc/squid-deb-proxy/squid-deb-proxy.conf"
pid=10301 comm="squid" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jul 20 16:35:30 Tardis squid-deb-proxy[10284]: Starting Squid Deb HTTP Proxy:
squid-deb-proxy2019/07/20 16:35:30| FATAL: Unable to open configuration file:
/etc/squid-deb-proxy/squid-deb-proxy.conf: (13) Permission denied
The fix is to add
/etc/squid-deb-proxy/** r,
to
/etc/apparmor.d/usr.sbin.squid
Then
apparmor_parser -r /etc/apparmor.d/usr.sbin.squid
systemctl restart squid-deb-proxy
#And test
dig +nocmd +noall +answer @224.0.0.251 -p 5353 -t ptr _apt_proxy._tcp.local
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8),
LANGUAGE=en_NZ:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
--- End Message ---
--- Begin Message ---
Source: squid-deb-proxy
Source-Version: 0.8.15+nmu1
Done: Hideki Yamane <henr...@debian.org>
We believe that the bug you reported is fixed in the latest version of
squid-deb-proxy, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 932...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hideki Yamane <henr...@debian.org> (supplier of updated squid-deb-proxy package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 14 Jun 2021 23:41:11 +0900
Source: squid-deb-proxy
Architecture: source
Version: 0.8.15+nmu1
Distribution: unstable
Urgency: medium
Maintainer: Michael Vogt <m...@debian.org>
Changed-By: Hideki Yamane <henr...@debian.org>
Closes: 932501
Changes:
squid-deb-proxy (0.8.15+nmu1) unstable; urgency=medium
.
* Non-maintainer upload.
* Add apparmor profiles to work (Closes: #932501)
Checksums-Sha1:
83f33f13934c37a3673a78a5f788e8c5326bfff2 1803 squid-deb-proxy_0.8.15+nmu1.dsc
b25e6f058b766b7523fd98a04892a1d5c4316090 22160
squid-deb-proxy_0.8.15+nmu1.tar.xz
9622b24d360ab475a939759fa419df106ec49f0d 7324
squid-deb-proxy_0.8.15+nmu1_amd64.buildinfo
Checksums-Sha256:
6f5c145bd5a00d4427d0dbb40f5a3154f474fcb8de4c7db91e2d05f796911ed1 1803
squid-deb-proxy_0.8.15+nmu1.dsc
47891793545962e35a5230b756f347ac9d7a4ce13f44d4ce484a58c8f56dc427 22160
squid-deb-proxy_0.8.15+nmu1.tar.xz
2508f1b7567e2183edb2dd23257a754c2a50b7805027033e8274195711d32584 7324
squid-deb-proxy_0.8.15+nmu1_amd64.buildinfo
Files:
bf9bd8860cd031fc8cf66fca96d29fc5 1803 net optional
squid-deb-proxy_0.8.15+nmu1.dsc
eb984fc11fd0a287ee2d8db055a3b8b5 22160 net optional
squid-deb-proxy_0.8.15+nmu1.tar.xz
e497b165b8e4c04b88c71b3836f7317e 7324 net optional
squid-deb-proxy_0.8.15+nmu1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=FKv5
-----END PGP SIGNATURE-----
--- End Message ---
