Debian Bug report logs - #214874
cfengine2: postinst script make_key functions fails creating ppkeys directory

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Daniel Pittman <daniel@rimspace.net>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: cfengine2: postinst script make_key functions fails creating ppkeys directory

Date: Thu, 09 Oct 2003 14:18:14 +1000

Package: cfengine2
Version: 2.0.9+2.1.0b3-1
Severity: normal

When the system private key does not exist, a call to 'mkdir' is made to
ensure that the /var/lib/cfengine2/ppkeys directory exists.

Unfortunately, it already does at that point, and the mkdir fails,
taking the installation with it. :/

Fixing it required this construct for me:

        if [ ! -d /var/lib/cfengine2/ppkeys ]; then
            mkdir /var/lib/cfengine2/ppkeys
            chmod 0700 /var/lib/cfengine2/ppkeys
        fi

Note that the permissions need to be made very restrictive (and with
good reason) or the cfkeys process is very unhappy.

        Daniel

-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux enki 2.6.0-test6 #6 Wed Oct 8 17:39:29 EST 2003 i686
Locale: LANG=C, LC_CTYPE=C

Versions of packages cfengine2 depends on:
ii  debconf                       1.3.14     Debian configuration management sy
ii  debianutils                   2.5.5      Miscellaneous utilities specific t
ii  libc6                         2.3.2-8    GNU C Library: Shared libraries an
ii  libdb4.1                      4.1.25-9   Berkeley v4.1 Database Libraries [
ii  libssl0.9.7                   0.9.7c-3   SSL shared libraries
ii  perl                          5.8.1-2    Larry Wall's Practical Extraction 

-- debconf information:
* cfengine2/run_cfservd: true
* cfengine2/run_cfexecd: true
* cfengine2/run_cfenvd: true


-- 
The string is a stark data structure and everywhere it is passed there
is much duplication of process. It is a perfect vehicle for hiding
information.
        -- Alan J. Perlis, _Epigrams in Programming_ (September, 1982)

Message #10 received at 214874@bugs.debian.org (full text, mbox, reply):

From: Andrew Stribblehill <a.d.stribblehill@durham.ac.uk>

To: "David D. Smith" <ultrasoul@ultrasoul.com>, 214764@bugs.debian.org, Paul Heinlein <heinlein@madboa.com>, Daniel Pittman <daniel@rimspace.net>, 214874@bugs.debian.org

Cc: control@bugs.debian.org

Subject: Re: cfengine2: postinst not idempotent, perms wrong on key dir

Date: Thu, 9 Oct 2003 09:36:30 +0100

tags 214764 + pending
tags 214874 + pending
thanks

Hi. I've fixed the problem in my soon-to-be-released version. Thanks
for pointing it out -- looks like you hit a race condition between
finding the bug and reporting it, Daniel :)

It turns out that cfkey is perfectly capable of creating the ppkeys
directory of its own accord, so I'm leaving it to do that.

-- 
Andrew Stribblehill <ads@debian.org>
Systems programmer, IT Service, University of Durham, England

Message #17 received at 214874-close@bugs.debian.org (full text, mbox, reply):

From: Andrew Stribblehill <ads@debian.org>

To: 214874-close@bugs.debian.org

Subject: Bug#214874: fixed in cfengine2 2.0.9+2.1.0b5-1

Date: Wed, 15 Oct 2003 13:47:19 -0400

Source: cfengine2
Source-Version: 2.0.9+2.1.0b5-1

We believe that the bug you reported is fixed in the latest version of
cfengine2, which is due to be installed in the Debian FTP archive:

cfengine2-doc_2.0.9+2.1.0b5-1_all.deb
  to pool/main/c/cfengine2/cfengine2-doc_2.0.9+2.1.0b5-1_all.deb
cfengine2_2.0.9+2.1.0b5-1.diff.gz
  to pool/main/c/cfengine2/cfengine2_2.0.9+2.1.0b5-1.diff.gz
cfengine2_2.0.9+2.1.0b5-1.dsc
  to pool/main/c/cfengine2/cfengine2_2.0.9+2.1.0b5-1.dsc
cfengine2_2.0.9+2.1.0b5-1_i386.deb
  to pool/main/c/cfengine2/cfengine2_2.0.9+2.1.0b5-1_i386.deb
cfengine2_2.0.9+2.1.0b5.orig.tar.gz
  to pool/main/c/cfengine2/cfengine2_2.0.9+2.1.0b5.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 214874@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrew Stribblehill <ads@debian.org> (supplier of updated cfengine2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 15 Oct 2003 16:54:31 +0100
Source: cfengine2
Binary: cfengine2 cfengine2-doc
Architecture: source all i386
Version: 2.0.9+2.1.0b5-1
Distribution: unstable
Urgency: low
Maintainer: Andrew Stribblehill <ads@debian.org>
Changed-By: Andrew Stribblehill <ads@debian.org>
Description: 
 cfengine2  - Tool for configuring and maintaining network machines
 cfengine2-doc - HTML and Info documentation for cfengine2
Closes: 214323 214730 214764 214874 214971 215910
Changes: 
 cfengine2 (2.0.9+2.1.0b5-1) unstable; urgency=low
 .
   * New upstream version.
   * Symlink /var/lib/cfengine2/bin to /usr/sbin for cfexecd.
     Closes: Bug#214323
   * Don't create /var/lib/cfengine2/ppkeys in postinst; let cfkey
     make it so it gets the permissions right.
     Closes: Bug#214730, #214764, #214874
   * Set the permissions for the lock directory to go-w rather than explicitly
     0755. (Patch from Daniel Parthey).
     Closes: Bug#215910
   * Allow variable expansion in admit/grant entries to
     cfservd.conf. (Patch from Kevin Squire).
     Closes: Bug#214971
Files: 
 37c0e38199ba2160327d0724c14a5c7e 781 admin optional cfengine2_2.0.9+2.1.0b5-1.dsc
 bc1790ded4dcd0dfd5452450c7b17465 1280037 admin optional cfengine2_2.0.9+2.1.0b5.orig.tar.gz
 395911b0778d519abe12b0bce5ee4f57 30103 admin optional cfengine2_2.0.9+2.1.0b5-1.diff.gz
 964682b3d98fcd1705b31550317a76d5 455900 doc extra cfengine2-doc_2.0.9+2.1.0b5-1_all.deb
 9ff3eb99228979751a1802ba3d2b0780 524862 admin optional cfengine2_2.0.9+2.1.0b5-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/jYfxcByyo9pgKCIRAm3UAJ90FAHX03CHxQqfp4lTO49gW0z53QCgpp/w
Yr9n3akF2EdF1m+O/GMUw5A=
=5zLX
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.