Debian Bug report logs - #770330
android-permissions: modifying conffiles from another package: /etc/login.defs

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Andreas Beckmann <anbe@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: android-permissions: modifying conffiles from another package: /etc/login.defs

Date: Thu, 20 Nov 2014 15:01:37 +0100

[Message part 1 (text/plain, inline)]

Package: android-permissions
Version: 0.2
Severity: serious
User: debian-qa@lists.debian.org
Usertags: piuparts

Hi,

during a test with piuparts I noticed your package modifies conffiles from
another package.

This is forbidden by the policy, see
https://www.debian.org/doc/debian-policy/ch-files.html#s-config-files

>From the attached log (scroll to the bottom...):

1m21.2s ERROR: FAIL: debsums reports modifications inside the chroot:
  /etc/login.defs


cheers,

Andreas

[android-permissions_0.2.log.gz (application/gzip, attachment)]

Message #10 received at 770330@bugs.debian.org (full text, mbox, reply):

From: Hans-Christoph Steiner <hans@eds.org>

To: 770330@bugs.debian.org

Subject: how to change UID_MIN, UID_MAX, FIRST_GID, LAST_GID, etc.?

Date: Tue, 25 Nov 2014 12:05:50 +0100

[Message part 1 (text/plain, inline)]

android-permissions integrates the Android permissions into a Debian chroot
running on Android.  This package should only ever run on a Debian chroot
running with an Android kernel.  It should modify things like GID_MAX or
LAST_GID in /etc/login.defs and /etc/adduser.conf to reflect the hard-coded
Android UIDs and GIDs, but it is a policy violation for a package to modify
those files. Any suggestions as how to best tackle this issue?

[signature.asc (application/pgp-signature, attachment)]

Message #15 received at 770330@bugs.debian.org (full text, mbox, reply):

From: Hans-Christoph Steiner <hans@eds.org>

To: 770330@bugs.debian.org

Subject: ideas from #debian-devel

Date: Tue, 25 Nov 2014 12:49:57 +0100

[Message part 1 (text/plain, inline)]

The package android-permissions integrates the Android permissions into a
Debian chroot running on Android.  Android permissions are implemented in
Android's Linux kernel using UIDs and GIDs.  Therefore, this package should
only ever run on a Debian chroot running with an Android kernel.  It adds all
of the hard-coded users and groups to Debian.  It should also modify things
like GID_MAX or LAST_GID in /etc/login.defs and /etc/adduser.conf to reflect
the hard-coded Android UIDs and GIDs.

One idea for a solution was to make a debootstrap variant, but I'm not sure
that cdebootstrap
supports that. The idea is rather than having the package do these changes
directly, it provides a script that does the changes to a specified root
directory.  Then this script is run as part of the variant.

Another idea is to create /etc/login.defs.d and /etc/adduser.conf.d so that
packages can add definitions there.  I'm not sure yet whether either approach
is good.

[signature.asc (application/pgp-signature, attachment)]

Message #20 received at 770330@bugs.debian.org (full text, mbox, reply):

From: László Böszörményi (GCS) <gcs@debian.org>

To: 770330@bugs.debian.org

Subject: Re: [Android-tools-devel] Bug#770330: how to change UID_MIN, UID_MAX, FIRST_GID, LAST_GID, etc.?

Date: Tue, 25 Nov 2014 16:16:54 +0100

On Tue, Nov 25, 2014 at 12:05 PM, Hans-Christoph Steiner <hans@eds.org> wrote:
> android-permissions integrates the Android permissions into a Debian chroot
> running on Android.  This package should only ever run on a Debian chroot
> running with an Android kernel.  It should modify things like GID_MAX or
> LAST_GID in /etc/login.defs and /etc/adduser.conf to reflect the hard-coded
> Android UIDs and GIDs, but it is a policy violation for a package to modify
> those files. Any suggestions as how to best tackle this issue?
 I need to investigate, but I think policy only forbids modification
of the these files on a normal system. If you or the package create a
chroot and modify these files in it, then it's normal if I ask me now.
You can check if chrooted with the following code snippet (run as
root):
-- cut --
if [ "$(stat -c %d:%i /)" != "$(stat -c %d:%i /proc/1/root/.)" ]; then
  echo "We are chrooted!"
else
  echo "Business as usual"
fi
-- cut --

I think if you run on an Android device, then 'getprop
ro.build.version.release' should give you its version number,
otherwise should be empty or getprop not even installed. These should
help you, can't test it right now.

Regards,
Laszlo/GCS

Message #25 received at 770330@bugs.debian.org (full text, mbox, reply):

From: Hans-Christoph Steiner <hans@eds.org>

To: 770330@bugs.debian.org

Subject: using getprop in debian/preinst

Date: Fri, 28 Nov 2014 13:57:54 +0100

[Message part 1 (text/plain, inline)]

Hey Lazslo/GCS,

Any luck with your investigation?  I'd like to avoid having this package
AUTORMed from jessie.

I added your improved chroot detection to enforce that this package is only
included on a chroot.  As for the `getprop` method, I can't think of anyway to
really use getprop from a debian/preinst script since it'll always be in
/system/bin/getprop, and not in the Debian chroot.

.hc

[signature.asc (application/pgp-signature, attachment)]

Message #30 received at 770330@bugs.debian.org (full text, mbox, reply):

From: Jonathan Wiltshire <jmw@debian.org>

To: Hans-Christoph Steiner <hans@eds.org>, 771648-done@bugs.debian.org

Cc: 770330@bugs.debian.org

Subject: Re: Bug#771648: please delay autorm of android-permissions

Date: Mon, 01 Dec 2014 12:22:07 +0000

On 2014-12-01 08:46, Hans-Christoph Steiner wrote:
> Please delay autorm of android-permissions from jessie.  We need more 
> time to
> figure out the exact details of policy vs technical solutions for this 
> very
> specific package (it is designed only to be installed on Debian chroots
> running on Android).  I have committed a fix that enforces that this 
> package
> is only installable on chroots, and if that makes it acceptable to 
> policy,
> then I can push the package update to fix the RC bug in question.

Autoremoval is delayed by bug activity; CCing it.

-- 
Jonathan Wiltshire                                      jmw@debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

<directhex> i have six years of solaris sysadmin experience, from
            8->10. i am well qualified to say it is made from bonghits
			layered on top of bonghits

Message #35 received at 770330@bugs.debian.org (full text, mbox, reply):

From: Hans-Christoph Steiner <hans@eds.org>

To: 770330@bugs.debian.org

Subject: booted

Date: Tue, 09 Dec 2014 10:41:41 +0100

[Message part 1 (text/plain, inline)]

This bug report has officially booted this package out of jessie, and its not
even clear it was for valid reasons.  I don't have time to do anything else
with it for a while, so I'm sad.  Feel free to try to get it into jessie, I'd
like to see it there.

.hc

[signature.asc (application/pgp-signature, attachment)]

Message #40 received at 770330@bugs.debian.org (full text, mbox, reply):

From: Sarah Stone <sarahstone365@gmail.com>

To: 770330@bugs.debian.org

Subject: Re: null

Date: Sun, 20 Sep 2015 22:06:41 +0000

[Message part 1 (text/plain, inline)]

Date: null
>From: null
>-------------
>Body: ur-type{attachments=[]; body=Package: android-permissions
>Version: 0.2
>Severity: serious
>User: debian-qa@lists.debian.org
>Usertags: piuparts
>
>Hi,
>
>during a test with piuparts I noticed your package modifies conffiles from
>another package.
>
>This is forbidden by the policy, see
>https://www.debian.org/doc/debian-policy/ch-files.html

[Message part 2 (text/html, inline)]

Message #45 received at 770330@bugs.debian.org (full text, mbox, reply):

From: mohamad firdaus hasnan <mohamadfirdaushasnan@gmail.com>

To: 770330@bugs.debian.org

Subject: Re: booted

Date: Sun, 13 Nov 2016 04:28:17 +0800

[Message part 1 (text/plain, inline)]

Date: Tue, 09 Dec 2014 10:41:41  0100
>From: Hans-Christoph Steiner <hans@eds.org>
>-------------
>Body: ur-type{attachments=[]; header=Received: (at submit) by
bugs.debian.org; 20 Nov 2014 14:01:40  0000
>From anbe@debian.org Thu Nov 20 14:01:40 2014
>X-Spam-Checker-Version: SpamAssassin 3.3.2-bugs.debian.org_2005_01_02
> (2011-06-06) on buxtehude.debian.org
>X-Spam-Level:
>X-Spam-Status: No, score=-11.9 required=4.0 tests=BAYES_00,FOURLA,
> FROMDEVELOPER,HAS_PACKAGE autolearn=ham
> version=3.3.2-bugs.debian.org_2005_01_02
>X-Spam-Bayes: score:0.0000 Tokens: new, 10; hammy, 113; neutral, 30;
spammy,
> 0. spammytokens: hammytokens:0.000- --H*M:reportbug, 0.000-
--H*MI:reportbug,
> 0.000- --debianpolicy, 0.000- --debian-policy, 0.000- --Usertags
>Return-path: <anbe@debian.org>
>Received: from dezi.unixos.de ([81.169.143.90])
> by buxtehude.debian.org with esmtp (Exim 4.80)
> (envelope-from <anbe@debian.org>)
> id 1XrSIl-0007Io-Td
> for submit@bugs.debian.org; Thu, 20 Nov 2014 14:01:40  0000
>Received: from dezi.unixos.de (localhost [127.0.0.1])
> by dezi.unixos.de (Postfix) with ESMTP id 9118E61A0F9;
> Thu, 20 Nov 2014 15:01:38  0100 (CET)
>Received: from zam581.zam.kfa-juelich.de (
dslb-088-078-193-053.088.078.pools.vodafone-ip.de [88.78.193.53])
> by dezi.unixos.de (Postfix) with ESMTPSA id 3D21761A00A;
> Thu, 20 Nov 2014 15:01:38  0100 (CET)
>Content-Type: multipart/mixed;
boundary="===============4737623391795201016=="
>MIME-Version: 1.0
>From: Andreas Beckmann <anbe@debian.org>
>To: Debian Bug Tracking System <submit@bugs.debian.org>
>Subject: android-permissions: modifying conffiles from another package:
> /etc/login.defs
>Message-ID: <20141120140137.21516.95946.reportbug@zam581.zam.kfa-juelich.de
>
>Date: Thu, 20 Nov 2014 15:01:37  0100
>X-AV-Checked: ClamAV using ClamSMTP
>Delivered-To: submit@bugs.debian.org; body=This is a multi-part MIME
message sent by reportbug.
>
>
>--===============4737623391795201016==
>Content-Type: text/plain; charset="us-ascii"
>MIME-Version: 1.0
>Content-Transfer-Encoding: 7bit
>Content-Disposition: inline
>
>Package: android-permissions
>Version: 0.2
>Severity: serious
>User: debian-qa@lists.debian.org
>Usertags: piuparts
>
>Hi,
>
>during a test with piuparts I noticed your package modifies conffiles from
>another package.
>
>This is forbidden by the policy, see
>https://www.debian.org/doc/debian-policy/ch-files.html

[Message part 2 (text/html, inline)]

Message #50 received at 770330@bugs.debian.org (full text, mbox, reply):

From: mohamad firdaus hasnan <mohamadfirdaushasnan@gmail.com>

To: 770330@bugs.debian.org

Subject: Re: Re: Bug

Date: Sun, 13 Nov 2016 04:29:05 +0800

[Message part 1 (text/plain, inline)]

[Message part 2 (text/html, inline)]

Message #55 received at 770330@bugs.debian.org (full text, mbox, reply):

From: apaiforex <apaiforex@gmail.com>

To: "770330@bugs.debian.org" <770330@bugs.debian.org>

Date: Wed, 16 Nov 2016 10:46:42 +0800

[Message part 1 (text/plain, inline)]

Sent from my Samsung Galaxy smartphone.

[Message part 2 (text/html, inline)]

[Interaction control - package com.samsung.android.app.accesscontrol - versionCode 1506271701.apk (application/apk, attachment)]

Message #60 received at 770330-done@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 770330-done@bugs.debian.org,860733-done@bugs.debian.org,

Cc: android-permissions@packages.debian.org, android-permissions@packages.qa.debian.org

Subject: Bug#870998: Removed package(s) from unstable

Date: Sun, 10 Sep 2017 16:08:55 +0000

Version: 0.2+rm

Dear submitter,

as the package android-permissions has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/870998

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)

Send a report that this bug log contains spam.