Bug 20209

Summary: ip6tables-restore-translate ip6tables-translate iptables-restore-translate iptables-translate dangling links
Product: Mageia Reporter: Bit Twister <bittwister2>
Component: RPM PackagesAssignee: Kernel and Drivers maintainers <kernel>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: Normal CC: geiger.david68210, marja11
Version: CauldronKeywords: 6sta2
Target Milestone: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Source RPM: iptables-1.6.1-1.mga6.src.rpm CVE:
Status comment:

Description Bit Twister 2017-01-30 02:03:48 CET
Description of problem:  6_s2

The following are the dangling links: 
/usr/sbin/ip6tables-restore-translate -> xtables-compat-multi 
/usr/sbin/ip6tables-translate -> xtables-compat-multi 
/usr/sbin/iptables-restore-translate -> xtables-compat-multi 
/usr/sbin/iptables-translate -> xtables-compat-multi 


Version-Release number of selected component (if applicable):

How reproducible: Always


Steps to Reproduce:
1. Clean install of Mageia-6-sta2-x86_64-DVD.iso 
   with enabled non-free and tainted media.
2. Pick Custom package install
3. in Package Group Selection screen set all package groups selected except
   Other Graphical Desktops. In that one select Gnome, Plasma and Xfce.
   Complete install, reboot
4. click up a terminal
5. su - root
6. urpmi symlinks
7. apply all updates, then run
8. symlinks -r / | grep dangling
Bit Twister 2017-01-30 02:04:08 CET

Status comment: (none) => 6_s2

Comment 1 Marja Van Waes 2017-01-30 08:47:25 CET
$ urpmq -g iptables
System/Kernel and hardware/iptables

So assigning to the Kernel maintainers

CC: (none) => marja11
Assignee: bugsquad => kernel

Comment 2 David Walser 2017-01-30 11:25:37 CET
Please don't put 6_s2 in the status comment field, it's not a status comment.  A status comment is supposed to be a short summary of the current state of the bug.

As for the bug, those four links showed up as new files in the iptables 1.6.1 release.  I have no idea what the xtables-compat-multi that they're pointing at is supposed to be.

Status comment: 6_s2 => (none)

Comment 3 Marja Van Waes 2017-01-30 11:56:11 CET
(In reply to David Walser from comment #2)
> Please don't put 6_s2 in the status comment field, it's not a status
> comment.  A status comment is supposed to be a short summary of the current
> state of the bug.
> 

Well, he was told to neither add that to summary of the bug report, nor to use the "6sta2" keyword (unless it's a iso bug).

However, I think using the keyword is OK, because iso bugs will have the release component or the installer component and/or be filed against stage2 or draklive-install. For me it is easier to see when a cauldron bug was last confirmed to be valid if that keyword is set, than when it isn't and I need to wade through the comments.

Let's see whether anyone complains if I set the 6sta2 keyword.

Keywords: (none) => 6sta2

Comment 4 David Walser 2017-01-30 12:02:33 CET
OK, from looking at iptables/Makefile.am, I see that xtables-compat-multi is supposed to be installed if ENABLE_NFTABLES is enabled, and it is.  Also, from the build log, it loos like xtables-compat-multi *is* installed in /sbin:
http://pkgsubmit.mageia.org/uploads/done/cauldron/core/release/20170128111738.akien.duvel.5222/iptables-1.6.1-1.mga6/build.0.20170128111802.log

So I don't know why RPM didn't complain about it not being in the files list.
Comment 5 Bit Twister 2017-01-30 12:36:12 CET
(In reply to David Walser from comment #2)
> Please don't put 6_s2 in the status comment field, it's not a status
> comment.

Seems like it is to me. I did post on dev/QA discussion list and no one really seemed to have a problem with me using it.

>  A status comment is supposed to be a short summary of the current
> state of the bug.

Well, I thought that was a pretty "short summary" of the state of the bug.

I am trying very hard to help reduce the work load on anyone wanting to know if the bug is still valid.

But, hey, I have no problem modifying my script to use "still fails on 6_s2".
Comment 6 David GEIGER 2017-02-11 14:48:42 CET
Installing "iptables-nft" fixes this dangling links issue:

$ urpmf /xtables-compat-multi
iptables-nft:/sbin/xtables-compat-multi
$

So I think that main iptables package should require iptables-nft, WDYT?

CC: (none) => geiger.david68210

Comment 7 David GEIGER 2017-02-11 14:53:59 CET
Or moved the four following files to the subpackage "iptables-nft":

/usr/sbin/ip6tables-restore-translate
/usr/sbin/ip6tables-translate
/usr/sbin/iptables-restore-translate
/usr/sbin/iptables-translate
Comment 8 David GEIGER 2017-02-12 07:15:53 CET
Fixed in next iptables update!

- iptables-1.6.1-2.mga6

Status: NEW => RESOLVED
Resolution: (none) => FIXED