master.pid is insecure

Package: puppet-master; Maintainer for puppet-master is (unknown); Source for puppet-master is src:puppetserver.

Reported by: Joril <jorilx@gmail.com>

Date: Sat, 15 Jan 2022 08:56:01 UTC

Severity: normal

Tags: debian

Found in version 5.5.10-4

Done: Mark Hindley <mark@hindley.org.uk>

Forwarded to https://bugs.debian.org/1003867

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to devuan-bugs@lists.dyne.org, devuan-dev@lists.dyne.org:
bug#653; Package puppet-master. (Sat, 15 Jan 2022 08:56:01 GMT) (full text, mbox, link).

Acknowledgement sent to Joril <jorilx@gmail.com>:
New bug report received and forwarded. Copy sent to devuan-dev@lists.dyne.org. (Sat, 15 Jan 2022 08:56:05 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.devuan.org (full text, mbox, reply):

Package: puppet-master
Version: 5.5.10-4
Severity: normal

Dear Maintainer,

Trying to stop puppet-master on Beowulf results in this error:

# service puppet-master stop
[....] Stopping puppet masterstart-stop-daemon: matching only on non-root pidfile /run/puppet/master.pid is insecure
 failed!

Thanks for your time!

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 4.19.0-18-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages puppet-master depends on:
ii  lsb-base  10.2019051400
ii  puppet    5.5.10-4
ii  ruby      1:2.5.1

puppet-master recommends no packages.

puppet-master suggests no packages.

-- no debconf information

Information forwarded to devuan-bugs@lists.dyne.org, devuan-dev@lists.dyne.org:
bug#653; Package puppet-master. (Sat, 15 Jan 2022 10:02:01 GMT) (full text, mbox, link).

Message #8 received at 653@bugs.devuan.org (full text, mbox, reply):

Control: tags -1 debian

Joril,

Thanks for this.

On Sat, Jan 15, 2022 at 09:55:08AM +0100, Joril wrote:
> Package: puppet-master
> Version: 5.5.10-4
> Severity: normal

Puppet-master is not a forked package in Devuan and we use Debian's packages
directly without recompilation. Please would you report this issue to Debian's
BTS.

Thanks.

Mark

Added tag(s) debian. Request was from Mark Hindley <mark@hindley.org.uk> to 653-submit@bugs.devuan.org. (Sat, 15 Jan 2022 10:02:03 GMT) (full text, mbox, link).

Set bug forwarded-to-address to 'https://bugs.debian.org/1003867'. Request was from Mark Hindley <mark@hindley.org.uk> to control@bugs.devuan.org. (Mon, 17 Jan 2022 09:58:02 GMT) (full text, mbox, link).

Reply sent to Mark Hindley <mark@hindley.org.uk>:
You have taken responsibility. (Tue, 10 Jan 2023 17:08:02 GMT) (full text, mbox, link).

Notification sent to Joril <jorilx@gmail.com>:
bug acknowledged by developer. (Tue, 10 Jan 2023 17:08:03 GMT) (full text, mbox, link).

Message #17 received at 653-done@bugs.devuan.org (full text, mbox, reply):

See https://bugs.debian.org/1021202

Send a report that this bug log contains spam.

Devuan bug report logs - #653 start-stop-daemon: matching only on non-root pidfile /run/puppet/master.pid is insecure

Devuan bug report logs - #653
start-stop-daemon: matching only on non-root pidfile /run/puppet/master.pid is insecure