Devuan bug report logs - #653
start-stop-daemon: matching only on non-root pidfile /run/puppet/master.pid is insecure

version graph

Package: puppet-master; Maintainer for puppet-master is (unknown); Source for puppet-master is src:puppetserver.

Reported by: Joril <jorilx@gmail.com>

Date: Sat, 15 Jan 2022 08:56:01 UTC

Severity: normal

Tags: debian

Found in version 5.5.10-4

Done: Mark Hindley <mark@hindley.org.uk>

Forwarded to https://bugs.debian.org/1003867

Full log


🔗 View this message in rfc822 format

X-Loop: owner@bugs.devuan.org
Subject: bug#653: start-stop-daemon: matching only on non-root pidfile /run/puppet/master.pid is insecure
Reply-To: Mark Hindley <mark@hindley.org.uk>, 653@bugs.devuan.org
Resent-From: Mark Hindley <mark@hindley.org.uk>
Resent-To: devuan-bugs@lists.dyne.org
Resent-CC: devuan-dev@lists.dyne.org
X-Loop: owner@bugs.devuan.org
Resent-Date: Sat, 15 Jan 2022 10:02:01 +0000
Resent-Message-ID: <handler.653.B653.164224080230235@bugs.devuan.org>
Resent-Sender: owner@bugs.devuan.org
X-Devuan-PR-Message: followup 653
X-Devuan-PR-Package: puppet-master
X-Devuan-PR-Keywords: 
References: <164223690854.6170.5422121946210487709.reportbug@atools.panizzolo.local> <164223690854.6170.5422121946210487709.reportbug@atools.panizzolo.local>
Received: via spool by 653-submit@bugs.devuan.org id=B653.164224080230235
          (code B ref 653); Sat, 15 Jan 2022 10:02:01 +0000
Received: (at 653) by bugs.devuan.org; 15 Jan 2022 10:00:02 +0000
Delivered-To: devuanbugs@dyne.org
Received: from tupac3.dyne.org [195.169.149.119]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Sat, 15 Jan 2022 10:00:02 +0000 (UTC)
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id 07BAF66135B
	for <653@bugs.devuan.org>; Sat, 15 Jan 2022 10:59:15 +0100 (CET)
Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk)
	by mx.hindley.org.uk with smtp (Exim 4.84_2)
	(envelope-from <mark@hindley.org.uk>)
	id 1n8fq4-0006fy-Hj; Sat, 15 Jan 2022 09:59:12 +0000
Received: (nullmailer pid 32156 invoked by uid 1000);
	Sat, 15 Jan 2022 09:59:11 -0000
Date: Sat, 15 Jan 2022 09:59:11 +0000
From: Mark Hindley <mark@hindley.org.uk>
To: Joril <jorilx@gmail.com>, 653@bugs.devuan.org
Message-ID: <YeKa77XpW6uRqbt/@hindley.org.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <164223690854.6170.5422121946210487709.reportbug@atools.panizzolo.local>
X-Spam-Status: No, score=0.4 required=5.0 tests=RCVD_IN_DNSWL_BLOCKED,
	RDNS_DYNAMIC,SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org
Control: tags -1 debian

Joril,

Thanks for this.

On Sat, Jan 15, 2022 at 09:55:08AM +0100, Joril wrote:
> Package: puppet-master
> Version: 5.5.10-4
> Severity: normal

Puppet-master is not a forked package in Devuan and we use Debian's packages
directly without recompilation. Please would you report this issue to Debian's
BTS.

Thanks.

Mark

Send a report that this bug log contains spam.


Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.

Devuan Bugs Owner <owner@bugs.devuan.org>.
Last modified: Sat Nov 23 23:40:57 2024;