Bug 10884

Summary: dansguardian installs too many Suggests
Product: Mageia Reporter: Derek Jennings <derekjenn>
Component: RPM PackagesAssignee: QA Team <qa-bugs>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: Normal CC: davidwhodgins, gstoduto, martynvidler, sysadmin-bugs, tmb
Version: 3Keywords: validated_update
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: MGA3-32-ok MGA3-64-ok
Source RPM: dansguardian-2.10.1.1-9.mga3.src.rpm CVE:
Status comment:

Description Derek Jennings 2013-07-30 13:03:46 CEST 
dansguardian installs a mail server, and a web server which are not required for normal operation. Once the Suggests of the Suggests have been installed up to 90 packages are installed with dansguardian.

One of the Suggests of a Suggest is c-icap-server which causes dansguardian to take up to 6 minutes to start from boot. See Bug 10772

This buf report has been split off from 10772 to differentiate between the problem with c-icap-server delaying the start of squid service, and the propblem of dansguardian installing too many Suggests.

Update to dansguardian now in mageia 3 updates_testing

SRPM
dansguardian-2.10.1.1-9.1.mga3.src.rpm

RPMS
dansguardian-2.10.1.1-9.1.mga3.i586.rpm
dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm

Advisory
--------
This is a bugfix update for dansguardian to prevent unnecessary packages being installed along with dansguardian (mga#10772). One effect of installing these extra packages is that dansguardian may take several minutes to start working after a reboot.

Users upgrading dansguardian are recommended to uninstall the c-icap-server package unless it is specifically required.

Other services which may have been installed are postfix, apache,cherokee, and lighttp.



Test procedure
--------------
Uninstall (if already installed)
dansguardian, squid, postfix, apache, cherokee, lighttpd, c-icap-server, c-icap-modules, drakguard

Install dansguardian-2.10.1.1-9.1.mga3 when prompted select squid to satisfy the webproxy requirement.

Observe that dansguardian and squid is installed, but not any of the other packages listed in the first step.

Confirm parental controls work normally by installing and enabling drakguard-0.7.14-1.mga3.noarch.rpm (the latest version)






Reproducible: 

Steps to Reproduce:
Derek Jennings 2013-07-30 13:04:36 CEST

Status: NEW => ASSIGNED

Comment 1 martyn vidler 2013-07-30 21:28:31 CEST 
Mga3 32

Installed 

In order to satisfy the 'webproxy' dependency, one of the following packages is needed:
 1- privoxy-3.0.21-1.mga3.i586: Privacy enhancing HTTP proxy (to install)
 2- squid-3.2.10-1.4.mga3.i586: The Squid proxy caching server 3.2.10 (to install)
What is your choice? (1-2) 2
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch
(medium "Core Release (distrib1)")
  libecap2                       0.2.0        2.mga3        i586    (suggested)
  libpcreposix1                  8.32         9.mga3        i586
  perl-Authen-Smb                0.910.0      8.mga3        i586    (suggested)
(medium "Core Updates (distrib3)")
  squid                          3.2.10       1.4.mga3      i586    (suggested)
(medium "Core Updates Testing (distrib5)")
  dansguardian                   2.10.1.1     9.1.mga3      i586
10MB of additional disk space will be used.
2.7MB of packages will be retrieved.
Proceed with the installation of the 5 packages? (Y/n)

$MIRRORLIST: media/core/release/perl-Authen-Smb-0.910.0-8.mga3.i586.rpm
    $MIRRORLIST: media/core/release/libpcreposix1-8.32-9.mga3.i586.rpm
    $MIRRORLIST: media/core/release/libecap2-0.2.0-2.mga3.i586.rpm
    $MIRRORLIST: media/core/updates/squid-3.2.10-1.4.mga3.i586.rpm
    $MIRRORLIST: media/core/updates_testing/dansguardian-2.10.1.1-9.1.mga3.i586.rpm
RRORLIST: media/core/updates/drakguard-0.7.14-1.mga3.noarch.rpm
installing drakguard-0.7.14-1.mga3.noarch.rpm from /var/cache/urpmi/rpms
Preparing...                     ############################################
      1/1: drakguard

Checked the operation of drakguard by blocking websites OK
Checked for web operation times performed as expected

Mga3 32 Validated

CC: (none) => martynvidler
Whiteboard: (none) => MGA3-32-ok

Comment 2 martyn vidler 2013-07-30 22:22:11 CEST 
MGA3 64

sudo urpmi dansguardian
[sudo] password for spiky: 
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Release")
  lib64pcreposix1                8.32         9.mga3        x86_64  
  privoxy                        3.0.21       1.mga3        x86_64  (suggested)
(medium "Core Updates Testing")
  dansguardian                   2.10.1.1     9.1.mga3      x86_64  
3.5MB of additional disk space will be used.
1.1MB of packages will be retrieved.
Proceed with the installation of the 3 packages? (Y/n) y


    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/release/privoxy-3.0.21-1.mga3.x86_64.rpm
    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/release/lib64pcreposix1-8.32-9.mga3.x86_64.rpm
    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/updates_testing/dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm
installing privoxy-3.0.21-1.mga3.x86_64.rpm dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm lib64pcreposix1-8.32-9.mga3.x86_64.rpm from /var/cache/urpmi/rpms
Preparing...                     ######################################################
      1/3: lib64pcreposix1       ######################################################
      2/3: privoxy               ######################################################
      3/3: dansguardian         


 sudo urpme squid
[sudo] password for spiky:
unknown package: squid

There is no option for Squid in 64 version and it,s not installed
Comment 3 Giuseppe Stoduto 2013-08-01 23:23:23 CEST 

I followed the "test procedure" and had no problems 
both on the test machine in virtualbox, both on the work machine

mageia3 x64

CC: (none) => gstoduto

Comment 4 martyn vidler 2013-08-01 23:28:27 CEST 
Giuseppe Stoduto

Did you get the option to install squid as you can see its not an option for me.
I will retry tomorrow though
Comment 5 Giuseppe Stoduto 2013-08-01 23:44:47 CEST 
The difference in my installation is that I have not used the terminal but drakrpm

tomorrow I'll try from the terminal
Comment 6 Giuseppe Stoduto 2013-08-02 14:05:22 CEST 
I confirm I have no problems

[root@giuseppe giuseppe]# urpmi dansguardian
Per soddisfare le dipendenze di "webproxy" serve uno dei seguenti pacchetti:
 1- privoxy-3.0.21-1.mga3.x86_64: Privacy enhancing HTTP proxy (da installare)
 2- squid-3.2.10-1.4.mga3.x86_64: The Squid proxy caching server 3.2.10 (da installare)
Quale scegli? (1-2) 2
Per soddisfare le dipendenze, saranno installati i seguenti pacchetti:
  Pacchetto                      Versione     Release       Arch.   
(supporto "Core Updates (distrib3)")
  squid                          3.2.10       1.4.mga3      x86_64  (suggerito)
(supporto "Core Updates Testing (distrib5)")
  dansguardian                   2.10.1.1     9.1.mga3      x86_64  
Altri 11MB di spazio disco saranno utilizzati.
verranno scaricati 2.8MB di pacchetti.
Procedo con l'installazione di 2 pacchetti? (S/n) 


    $MIRRORLIST: media/core/updates/squid-3.2.10-1.4.mga3.x86_64.rpm
    $MIRRORLIST: media/core/updates_testing/dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm
installazione di squid-3.2.10-1.4.mga3.x86_64.rpm dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm da /var/cache/urpmi/rpms
In preparazione...               #############################################
      1/2: dansguardian          #############################################
      2/2: squid                 #############################################
squid.service is not a native service, redirecting to /sbin/chkconfig.
Executing /sbin/chkconfig squid on
----------------------------------------------------------------------
Più informazioni sul pacchetto dansguardian-2.10.1.1-9.1.mga3.x86_64
Make sure to change your /etc/dansguardian/dansguardian.conf to reflect your own settings.
Special attention must be given to the port that the proxy server is listening to,
the port that dansguardian will listen to and to the web url to the dansguardian.pl cgi-script.

Author: Daniel Barron
daniel@jadeb.com

----------------------------------------------------------------------
[root@giuseppe giuseppe]# urpmi drakguard


    $MIRRORLIST: media/core/updates/drakguard-0.7.14-1.mga3.noarch.rpm
installazione di drakguard-0.7.14-1.mga3.noarch.rpm da /var/cache/urpmi/rpms   
In preparazione...               #############################################
      1/1: drakguard             #############################################
Comment 7 martyn vidler 2013-08-03 17:36:33 CEST 
Ok MGA3 64

sudo urpmi dansguardian
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Release")
  lib64pcreposix1                8.32         9.mga3        x86_64  
  privoxy                        3.0.21       1.mga3        x86_64  (suggested)
(medium "Core Updates Testing")
  dansguardian                   2.10.1.1     9.1.mga3      x86_64  
3.5MB of additional disk space will be used.
1.1MB of packages will be retrieved.
Proceed with the installation of the 3 packages? (Y/n) y


    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/release/privoxy-3.0.21-1.mga3.x86_64.rpm
    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/release/lib64pcreposix1-8.32-9.mga3.x86_64.rpm                                              
    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/updates_testing/dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm                                   
installing privoxy-3.0.21-1.mga3.x86_64.rpm dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm lib64pcreposix1-8.32-9.mga3.x86_64.rpm from /var/cache/urpmi/rpms                         
Preparing...                     ##############################################################################################################################################
      1/3: lib64pcreposix1       ##############################################################################################################################################
      2/3: privoxy               ##############################################################################################################################################
      3/3: dansguardian          ##############################################################################################################################################
----------------------------------------------------------------------
More information on package dansguardian-2.10.1.1-9.1.mga3.x86_64
Make sure to change your /etc/dansguardian/dansguardian.conf to reflect your own settings.
Special attention must be given to the port that the proxy server is listening to,
the port that dansguardian will listen to and to the web url to the dansguardian.pl cgi-script.

Author: Daniel Barron
daniel@jadeb.com

sudo urpme squid
unknown package: squid

Ok whats going wrong here I have no option for Squid
Also Using the GUI still no option for squid????
Comment 8 Giuseppe Stoduto 2013-08-03 22:01:28 CEST 
I do not know what to say
squid takes it from updates


    $MIRRORLIST: media/core/updates/squid-3.2.10-1.4.mga3.x86_64.rpm
    $MIRRORLIST: media/core/updates_testing/dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm

maybe you have not enabled the repository updates
Comment 9 martyn vidler 2013-08-03 23:21:17 CEST 
MGA3 64

My mistake enabled core-updates then urpmi dansguardian

In order to satisfy the 'webproxy' dependency, one of the following packages is needed:
 1- privoxy-3.0.21-1.mga3.x86_64: Privacy enhancing HTTP proxy (to install)
 2- squid-3.2.10-1.4.mga3.x86_64: The Squid proxy caching server 3.2.10 (to install)
What is your choice? (1-2) 2
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch
(medium "Core Release")
  lib64ecap2                     0.2.0        2.mga3        x86_64  (suggested)
  lib64pcreposix1                8.32         9.mga3        x86_64
  perl-Authen-Smb                0.910.0      8.mga3        x86_64  (suggested)
(medium "Core Updates")
  squid                          3.2.10       1.4.mga3      x86_64  (suggested)
(medium "Core Updates Testing")
  dansguardian                   2.10.1.1     9.1.mga3      x86_64
11MB of additional disk space will be used.
2.8MB of packages will be retrieved.
Proceed with the installation of the 5 packages? (Y/n)y

    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/release/lib64ecap2-0.2.0-2.mga3.x86_64.rpm
    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/release/perl-Authen-Smb-0.910.0-8.mga3.x86_64.rpm
    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/release/lib64pcreposix1-8.32-9.mga3.x86_64.rpm
    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/updates/squid-3.2.10-1.4.mga3.x86_64.rpm
    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/updates_testing/dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm
installing lib64ecap2-0.2.0-2.mga3.x86_64.rpm squid-3.2.10-1.4.mga3.x86_64.rpm perl-Authen-Smb-0.910.0-8.mga3.x86_64.rpm lib64pcreposix1-8.32-9.mga3.x86_64.rpm dansguardian-2.10.1.1-9.1.mga3.x86_64.rpm from /var/cache/urpmi/rpms
Preparing...                     ##############################################################################################################################################
      1/5: lib64pcreposix1       ##############################################################################################################################################
      2/5: perl-Authen-Smb       ##############################################################################################################################################
      3/5: lib64ecap2            ##############################################################################################################################################
      4/5: squid

Generating a 1024 bit RSA private key
..............++++++
...................++++++
writing new private key to '/etc/pki/tls/private/squid.pem'
-----
squid.service is not a native service, redirecting to /sbin/chkconfig.
Executing /sbin/chkconfig squid on
      5/5: dansguardian          ##############################################################################################################################################
----------------------------------------------------------------------
More information on package dansguardian-2.10.1.1-9.1.mga3.x86_64
Make sure to change your /etc/dansguardian/dansguardian.conf to reflect your own settings.
Special attention must be given to the port that the proxy server is listening to,
the port that dansguardian will listen to and to the web url to the dansguardian.pl cgi-script.

Author: Daniel Barron
daniel@jadeb.com

udo urpmi drakguard


    rsync://www.mirrorservice.org/mageia.org/pub/mageia/distrib/3/x86_64/media/core/updates/drakguard-0.7.14-1.mga3.noarch.rpm
installing drakguard-0.7.14-1.mga3.noarch.rpm from /var/cache/urpmi/rpms                                                    
Preparing...                     ##############################################################################################################################################
      1/1: drakguard

Ran tests as in comment 1

Validating mga3 64
martyn vidler 2013-08-03 23:21:38 CEST

Whiteboard: MGA3-32-ok => MGA3-32-ok MGA3-64-ok

Comment 10 Dave Hodgins 2013-08-05 23:58:21 CEST 
Thanks martyn.

Could someone from the sysadmin team push 10884.adv to updates.

Keywords: (none) => validated_update
CC: (none) => davidwhodgins, sysadmin-bugs

Comment 11 Thomas Backlund 2013-08-09 19:46:26 CEST 
Update pushed:
http://advisories.mageia.org/MGAA-2013-0078.html

Status: ASSIGNED => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED