Home | Devuan | Git | Forum | Packages | Popcon
Donate now!
Download

Devuan bug report logs - #881
invoke-rc.d: Policy layer may override runlevel constraint

version graph

Package: init-system-helpers; Maintainer for init-system-helpers is Devuan Dev Team <devuan-dev@lists.dyne.org>; Source for init-system-helpers is src:init-system-helpers.

Reported by: Opty <opty77@gmail.com>

Date: Tue, 1 Apr 2025 12:16:02 UTC

Severity: normal

Tags: debian, moreinfo

Merged with 882, 883, 884

Found in version init-system-helpers/1.65.2devuan1

Full log

🔗 View this message in rfc822 format

X-Loop: owner@bugs.devuan.org
Subject: bug#881: invoke-rc.d: Policy layer may override runlevel constraint
Reply-To: Opty <opty77@gmail.com>, 881@bugs.devuan.org
Resent-From: Opty <opty77@gmail.com>
Resent-To: devuan-bugs@lists.dyne.org
Resent-CC: Devuan Dev Team <devuan-dev@lists.dyne.org>
X-Loop: owner@bugs.devuan.org
Resent-Date: Wed, 02 Apr 2025 11:56:01 +0000
Resent-Message-ID: <handler.881.B881.174359494227236@bugs.devuan.org>
Resent-Sender: owner@bugs.devuan.org
X-Devuan-PR-Message: followup 881
X-Devuan-PR-Package: init-system-helpers
X-Devuan-PR-Keywords: moreinfo
References: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com> <Z-wTFqfiCrvD9Exb@hindley.org.uk> <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com>
X-Devuan-PR-Source: init-system-helpers
Received: via spool by 881-submit@bugs.devuan.org id=B881.174359494227236
          (code B ref 881); Wed, 02 Apr 2025 11:56:01 +0000
Received: (at 881) by bugs.devuan.org; 2 Apr 2025 11:55:42 +0000
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Wed, 02 Apr 2025 11:55:42 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id CJ5TEW8l7WfJFwAAmSBk0A
	(envelope-from <opty77@gmail.com>)
	for <bugs@devuan.org>; Wed, 02 Apr 2025 11:54:23 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 1569F395; Wed,  2 Apr 2025 11:54:22 +0000 (UTC)
Authentication-Results: email.devuan.org;
	dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20230601 header.b=S4VEtq54;
	dkim-atps=neutral
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::22c; helo=mail-oi1-x22c.google.com; envelope-from=opty77@gmail.com; receiver=<UNKNOWN> 
Received: from mail-oi1-x22c.google.com (mail-oi1-x22c.google.com [IPv6:2607:f8b0:4864:20::22c])
	by email.devuan.org (Postfix) with ESMTPS id A300381
	for <881@bugs.devuan.org>; Wed,  2 Apr 2025 11:54:19 +0000 (UTC)
Received: by mail-oi1-x22c.google.com with SMTP id 5614622812f47-3feb1c2ef15so210129b6e.0
        for <881@bugs.devuan.org>; Wed, 02 Apr 2025 04:54:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1743594857; x=1744199657; darn=bugs.devuan.org;
        h=content-transfer-encoding:cc:to:subject:message-id:date:from
         :in-reply-to:references:mime-version:from:to:cc:subject:date
         :message-id:reply-to;
        bh=KqVS8/Afc8RNJZ2UtU4M7zrmK7F/zxmOJBcQQaLlgos=;
        b=S4VEtq54ZMY7Wd84Bjpj2JTzriEsn4AESFFGl3ovO8HR7ZY3MbA4upyxeSzTeQ2CEZ
         Doi6dRFkhmxfEnDqDGcsVgKfHBg9GPan9PyddVRP4+IXWFFKA8Q5VvLXWEtlCZGFvUdZ
         YNKrLUEGfzRhc6YDaL63fbCQr1e3LzNB7tWtTA2IxwjBrig03xMCYHBQ5t4/GEroOi1j
         DgDLU22RvAhDSPoE21U3iNBEmzl5akMcNUKguV8QlulqfulmBX1Cdpm/hJq1OYSZLKGz
         qFxJGr7wUZ5xx3w8W1y0ZZ9bA+HnmUIgQ6LUA74HcXM1HhoRZSHRJO7q0jVfSonTCKgP
         UqZg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1743594857; x=1744199657;
        h=content-transfer-encoding:cc:to:subject:message-id:date:from
         :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc
         :subject:date:message-id:reply-to;
        bh=KqVS8/Afc8RNJZ2UtU4M7zrmK7F/zxmOJBcQQaLlgos=;
        b=n9sRRhATnhYjM9lnL+ukNBtCeIRVYs5PhbFywKmWQ67NmI5npw4DRtyOR7m5b29jTI
         LsXv+s5xak+NkNrWuaQKzxZj5tVMtZrgZxE4CJxqFqEmFNAWjYEMfgyAdgyYhpSWLVZ6
         Mze15uHgtE/dT6wzZao2+qRMB3Unx+PYL2NQUwUXxk3leYeJr4HR8bmAuKCb7WRhBlTB
         cP59bYvrCtoo6gIQ6wsyCV9bT4jLyFqs3itsPs7vNv0vYd/2QE4TOtcms36o+VzrJVyR
         wAJU80uO8bHttmAERM9ZFCxvFQNzNhG+bQ9UYCzOJxbCCELBmYyNdbuDb+Jtde8gzJMi
         zOiQ==
X-Gm-Message-State: AOJu0Yxp8ibBu9BSX+CADLDGnAC9ngrEjGCYSujf45dnHMXnYDQc+H5a
	1i3b5F+cUJuEJE3MbVwwevKeVl9HtQ9BfEA8ut91NvoJAeLbBQ67YSCyZVlZwqAuCrN2Kn0sElW
	MfIurB8QW5GZQScu9YvTFqmQ7Zfw=
X-Gm-Gg: ASbGnct8vKMWq7c01n2c+Ij9NDS/+7SWN+amoici1ROV8hTfoAsnCYOz7q0fjhp/B2W
	ajwfSc8DU9DMYvt5ZxfRP8tmJzOOKKeN6VBIfQ7wPQ0YsyqVqY4STf1ZTk4fI5RqzV+ELTIfzMS
	dFy2bgBW7zyb/aALYE1euwHNztBLBDtSOXWQ==
X-Google-Smtp-Source: AGHT+IH3FkJAC/RAzpazpOTKAvNdtBsi8ea0odC9EoasrDB8OGJplcimVPD3+49F99vv3IY9jM3nuoFx2XkKwpNSZAM=
X-Received: by 2002:a05:6808:2388:b0:3f6:6dea:55ac with SMTP id
 5614622812f47-3ff0f601f1fmr3200589b6e.9.1743594857324; Wed, 02 Apr 2025
 04:54:17 -0700 (PDT)
MIME-Version: 1.0
In-Reply-To: <Z-wTFqfiCrvD9Exb@hindley.org.uk>
From: Opty <opty77@gmail.com>
Date: Wed, 2 Apr 2025 13:54:05 +0200
X-Gm-Features: AQ5f1Jok6XOGHfZgRvCg7KwMtl6z7Wu_0CVsANmJ4lFC6yKKiI0-BT1Afnq0YqQ
Message-ID: <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com>
To: Mark Hindley <mark@hindley.org.uk>
Cc: 881@bugs.devuan.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Tue, Apr 1, 2025 at 6:23 PM Mark Hindley <mark@hindley.org.uk> wrote:
> Thanks for this. However, I find your report a bit terse.
>
> Do you have policy-rcd-declarative installed? If so what is usage for it? How do
> you have a permissive policy defined?

Hopefully the whole story so far:

I wanted to disable services auto(re)start on package install/upgrade
so indeed I installed policy-rcd-declarative and
policy-rcd-declarative-deny-all which worked well for subsequent
vnstat install but then log rotation stopped working due to
invoke-rc.d so I modified 'deny' in /etc/service-policy.d/99-deny.pol
to 'allow' (*) but then K-link-disabled rsyslogd unexpectedly started
after an upgrade (**) so I had to surrender for now and 'chmod -x
/usr/sbin/policy-rc.d-declarative'.

(*) Yes, I should have installed policy-rcd-declarative-allow-all
instead but what if I needed to go back again so for now I chose this
maybe a bit confusing solution.

(**) I use own sysklogd package without dependencies so I can keep
rsyslog along and experiment.

> It is worth reading https://bugs.debian.org/911290 which gives some useful
> background as to why this area is a pretty unfrequented backwater.

I went through 911290 a week ago when I was doing my research.

Regards,
Opty

Send a report that this bug log contains spam.

Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.

Devuan Bugs Owner <owner@bugs.devuan.org>.
Last modified: Fri Apr 4 15:29:23 2025;