Bug#273507: marked as done (Final solution for SUID programs)

[Debian Bug Tracking System]

Your message dated Sat, 09 Oct 2004 12:32:09 -0400
with message-id <E1CGK8f-0003UX-00@newraff.debian.org>
and subject line Bug#273507: fixed in hurd 20040508-4
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 26 Sep 2004 17:50:33 +0000
>From ogi@fmi.uni-sofia.bg Sun Sep 26 10:50:33 2004
Return-path: <ogi@fmi.uni-sofia.bg>
Received: from lio.fmi.uni-sofia.bg (smtp.fmi.uni-sofia.bg) [62.44.101.7] 
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1CBdAP-0007qU-00; Sun, 26 Sep 2004 10:50:33 -0700
Received: from [62.44.101.57] ([62.44.101.57])
        by smtp.fmi.uni-sofia.bg
        for submit@bugs.debian.org;
        Sun, 26 Sep 2004 20:47:10 +0300
Message-ID: <415701CE.2030500@fmi.uni-sofia.bg>
Date: Sun, 26 Sep 2004 20:52:14 +0300
From: Ognyan Kulev <ogi@fmi.uni-sofia.bg>
Organization: Faculty of Mathematics and Informatics
User-Agent: Mozilla/5.0 (X11; U; Linux i686; rv:1.7.3) Gecko/20040918 
Thunderbird/0.8 Mnenhy/0.6.0.104
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: submit@bugs.debian.org
Subject: Final solution for SUID programs
X-Enigmail-Version: 0.86.1.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: multipart/mixed;
 boundary="------------070802080000090503060101"
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-7.0 required=4.0 tests=BAYES_01,HAS_PACKAGE 
        autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

This is a multi-part message in MIME format.
--------------070802080000090503060101
Content-Type: text/plain; charset=windows-1251; format=flowed
Content-Transfer-Encoding: 7bit

Package: hurd
Version: 20040508-4 UNRELEASED
Severity: important
Tags: sid patch

SVN hurd package doesn't really set SUID bit for /bin/login because 
chmod u+s is not executed on the correct file.  The attached patch sets 
SUID of /bin/login and other SUID programs.

Regards,
ogi

--------------070802080000090503060101
Content-Type: text/x-patch;
 name="rules.diff"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="rules.diff"

Index: rules
===================================================================
--- rules       (revision 53)
+++ rules       (working copy)
@@ -29,10 +29,14 @@
 DEB_CONFIGURE_USER_FLAGS := --disable-profile
 DEB_MAKE_INSTALL_TARGET = install prefix=$(DEB_DESTDIR) 
sysconfdir=$(DEB_DESTDIR)/etc localstatedir=$(DEB_DESTDIR)/var
 
+# Set-UID programs.  To get the list of Set-UID programs in the Hurd,
+# use the following command:
+#   find -name Makefile | xargs grep ^INSTALL-
+SUID_PROGRAMS = /bin/ids /bin/login /bin/ps /bin/w
+
 install/hurd::
        # runsystem is managed by update-alternatives
        mv debian/tmp/libexec/runsystem debian/tmp/libexec/runsystem.gnu
 
 binary-predeb/hurd::
-       chmod u+s $(DEB_DESTDIR)/bin/login
-
+       chmod u+s $(patsubst %, debian/$(cdbs_curpkg)%, $(SUID_PROGRAMS))

--------------070802080000090503060101--


---------------------------------------
Received: (at 273507-close) by bugs.debian.org; 9 Oct 2004 16:38:08 +0000
>From katie@ftp-master.debian.org Sat Oct 09 09:38:08 2004
Return-path: <katie@ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1CGKES-0004Bw-00; Sat, 09 Oct 2004 09:38:08 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
        id 1CGK8f-0003UX-00; Sat, 09 Oct 2004 12:32:09 -0400
From: Michael Banck <mbanck@debian.org>
To: 273507-close@bugs.debian.org
X-Katie: $Revision: 1.51 $
Subject: Bug#273507: fixed in hurd 20040508-4
Message-Id: <E1CGK8f-0003UX-00@newraff.debian.org>
Sender: Archive Administrator <katie@ftp-master.debian.org>
Date: Sat, 09 Oct 2004 12:32:09 -0400
Delivered-To: 273507-close@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
        autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 
X-CrossAssassin-Score: 2

Source: hurd
Source-Version: 20040508-4

We believe that the bug you reported is fixed in the latest version of
hurd, which is due to be installed in the Debian FTP archive:

hurd-dev_20040508-4_hurd-i386.deb
  to pool/main/h/hurd/hurd-dev_20040508-4_hurd-i386.deb
hurd_20040508-4.diff.gz
  to pool/main/h/hurd/hurd_20040508-4.diff.gz
hurd_20040508-4.dsc
  to pool/main/h/hurd/hurd_20040508-4.dsc
hurd_20040508-4_hurd-i386.deb
  to pool/main/h/hurd/hurd_20040508-4_hurd-i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 273507@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Banck <mbanck@debian.org> (supplier of updated hurd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu,  7 Oct 2004 20:11:38 +0200
Source: hurd
Binary: hurd-dev hurd
Architecture: hurd-i386 source 
Version: 20040508-4
Distribution: unstable
Urgency: low
Maintainer: GNU Hurd Maintainers <debian-hurd@lists.debian.org>
Changed-By: Michael Banck <mbanck@debian.org>
Description: 
 hurd       - The GNU Hurd
 hurd-dev   - The GNU Hurd (development files)
Closes: 272655 273507 273508
Changes: 
 hurd (20040508-4) unstable; urgency=low
 .
   [ Michael Banck ]
   * debian/changelog: Added back 20040301-1 entry which got lost.
   * debian/hurd.install: Do not install /sbin/fsck. (Closes: #272655)
   * debian/patches/rc.patch: Updated to use e2fsprog's /sbin/fsck
     command-line options.  Make sure the root file system is read-only
     during the fsck run, and update it to be writable again if fsck
     succeeds. (Closes: #273508)
   * debian/patches-contrib/ext2fs_20040930.diff: New file.  Just put it
     in debian/patches and recompile the package to get (experimental)
     support for ext2 files systems larger than 2GB.
   * debian/control (Maintainer): Changed Maintainer address.
 .
   [ Guillem Jover ]
   * debian/hurd.postinst:
     - Move /bin/login suid root chmod to debian/rules.
     - Set suid bit to other binaries (/bin/ps, /bin/ids, /bin/w).
       (Closes: #273507)
       Thanks Ognyan Kulev <ogi@fmi.uni-sofia.bg>.
Files: 
 5110d074fd9d14899b8971ecd52de5a4 2126636 base required 
hurd_20040508-4_hurd-i386.deb
 9f33ecd73ae6e2f65e6f0af8764b56b1 950960 libdevel standard 
hurd-dev_20040508-4_hurd-i386.deb
 aaf9eab885fde934a9faabee4824dee2 56742 base required hurd_20040508-4.diff.gz
 02259f7b63aa8529460fb775974936fe 797 base required hurd_20040508-4.dsc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBaAw7mHaJYZ7RAb8RAs/2AJ9sXWPHqw2DbNzXlNdkhBaagUuBPQCfU9NQ
iqYGp0tlZxn/xAMjzmsIzZs=
=TFWC
-----END PGP SIGNATURE-----