Bug 18159 - On MSEC, the status of data updates, does not give correct information.
Summary: On MSEC, the status of data updates, does not give correct information.
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Release (media or process) (show other bugs)
Version: 5
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: papoteur
URL:
Whiteboard: advisory MGA5-64-OK MGA5-32-OK
Keywords: validated_update
Depends on:
Blocks: 16084
  Show dependency treegraph
 
Reported: 2016-04-08 00:42 CEST by Sébastien B.
Modified: 2016-04-21 17:09 CEST (History)
6 users (show)

See Also:
Source RPM: msec
CVE:
Status comment:


Attachments

Description Sébastien B. 2016-04-08 00:42:14 CEST
Description of problem:
Hello,
On MSEC, the status of data updates, does not give correct information.
After an update, it still does not detect correctly the status.
Regards,
Vigen.


Version-Release number of selected component (if applicable):
Mageia5 and Cauldron.

How reproducible:

Using MSEC.


Steps to Reproduce:
1.Launch MSEC.
2.check the update/ update the system via MSEC.
3.update status, don't change.
Comment 1 Marja Van Waes 2016-04-09 10:15:14 CEST
Assigning to all packagers collectively, since there is no maintainer for this package.

CC: (none) => marja11
Assignee: bugsquad => pkg-bugs
Source RPM: MSEC does not detect the status of data updates. => msec

Comment 2 David GEIGER 2016-04-12 11:23:55 CEST
perhaps papoteur can take a look? :)

CC: (none) => geiger.david68210, yves.brungard_mageia

Comment 3 Mageia Robot 2016-04-16 10:34:59 CEST
commit a3989de3cddc98d1852c0a66634e75135f51bf4b
Author: Papoteur <papoteur@...>
Date:   Sat Apr 16 10:34:43 2016 +0200

    Restore a date formatting, suppressed by mistake (mga#18159)
---
 Commit Link:
   http://gitweb.mageia.org/software/msec/commit/?id=a3989de3cddc98d1852c0a66634e75135f51bf4b
Comment 4 papoteur 2016-04-16 11:23:29 CEST
How to test the correction.
Launch 
LANGUAGE=C msecgui
In "Updates" zone, see that message is "Unable to determine the update status"
Quit
Apply the update to msec 2.1
Launch it again.
In "Updates" zone, see that the date of the last update is displayed.
Papoteur
papoteur 2016-04-16 11:30:50 CEST

Whiteboard: (none) => MGA5TOO

Comment 5 Sébastien B. 2016-04-16 13:01:13 CEST
(In reply to papoteur from comment #4)
> How to test the correction.
> Launch 
> LANGUAGE=C msecgui
> In "Updates" zone, see that message is "Unable to determine the update
> status"
> Quit
> Apply the update to msec 2.1
> Launch it again.
> In "Updates" zone, see that the date of the last update is displayed.
> Papoteur

Hello,

After having updated the software version, to 2.1, the date of updates is properly informed on Cauldron.

For information, Is that version 2.1 will be present on Mageia5, or it will be available only on Mageia6?

Regards;

Vigen.

PS: Thanks for your works ;)
Comment 6 Mageia Robot 2016-04-16 22:56:54 CEST
commit e666ddb813a3045e769739e40a58c1b9884f580e
Author: Papoteur <papoteur@...>
Date:   Sat Apr 16 22:52:43 2016 +0200

    Restore a date formatting, suppressed by mistake (mga#18159)
---
 Commit Link:
   http://gitweb.mageia.org/software/msec/commit/?id=e666ddb813a3045e769739e40a58c1b9884f580e
Comment 7 Rémi Verschelde 2016-04-16 23:03:14 CEST
Pushed version 1.14 for Mageia 5 with the change in comment 6.

Yves will likely write the advisory tomorrow, but it should be ready to test already.

RPM in core/updates_testing:
============================

msec-1.14-1.1.mga5.noarch

SRPMs in core/updates_testing:
==============================

 - msec-1.14-1.1.mga5

Assignee: pkg-bugs => qa-bugs
QA Contact: (none) => yves.brungard_mageia

Comment 8 David Walser 2016-04-17 05:09:21 CEST
Another issue needs to be fixed in msec.  If you toggle the ALLOW_REBOOT setting, when it recreates the poweroff/halt/reboot/shutdown links, it links them to consolehelper instead of systemctl.

Version: Cauldron => 5
Whiteboard: MGA5TOO => (none)

Comment 9 papoteur 2016-04-17 13:04:17 CEST
@David.
Ok, the correction is just backported in 1.15 release.
See mga#16084
Comment 10 Rémi Verschelde 2016-04-17 13:42:13 CEST
New package that also fixes mga#16084:

RPM in core/updates_testing:
============================

msec-1.15-1.mga5.noarch

SRPMs in core/updates_testing:
==============================

 - msec-1.15-1.mga5
Comment 11 papoteur 2016-04-17 14:59:06 CEST
Advisory
============
- Use systemctl instead of consolehelper (mga#16084)
Commands halt/reboot/poweroff/shutdown are links to bin/systemctl. The option ALLOW_REBOOT can suppress or restore them. msec was restoring links to consolehelper instead of systemctl.
- Display the last update date in Updates zone (mga#18159)
It was "Unable to determine the update status". Now, the date is displayed.
Comment 12 Len Lawrence 2016-04-18 18:32:03 CEST
x86_64  Mate

Confirmed some of the points above, or not, before updating.
$ ls -l /bin/halt
lrwxrwxrwx 1 root root 16 Oct  4  2015 /bin/halt -> ../bin/systemctl*
$ ls -l /bin/shutdown
lrwxrwxrwx 1 root root 13 Jun 21  2015 /bin/shutdown -> consolehelper*
$ ls -l /bin/reboot
lrwxrwxrwx 1 root root 16 Oct  4  2015 /bin/reboot -> ../bin/systemctl*
$ ls -l /bin/poweroff
lrwxrwxrwx 1 root root 16 Oct  4  2015 /bin/poweroff -> ../bin/systemctl*

Those links were unchanged after a reboot.
/etc/security/level.{audit_daily,audit_weekly} have
ALLOW_REBOOT=

$ ls /etc/security/msec/
level.audit_daily   level.secure       perm.fileserver  perm.standard
level.audit_weekly  level.standard     perm.netbook     perm.webserver
level.fileserver    level.webserver    perm.none        security.conf
level.netbook       perm.audit_daily   perms.conf       server.local
level.none          perm.audit_weekly  perm.secure      server.remote

level.secure has ALLOW_REBOOT=no
level.standard has ALLOW_REBOOT=yes

$ sudo cat security.conf
BASE_LEVEL=standard

msecgui indicates that it is "Unable to determine update status" and after pressing 'Update now' (which found nothing to update) the message was unchanged.

Updated msec and msec-gui (which should be listed in the advisory).

msecgui now reports "Last updated: Mon 18 Apr 2016 16:53:22 BST" which is about right.

The /bin links have not changed.  /bin/shutdown points to consolehelper and the other three to systemctl.  I ran 'shutdown now' and again nothing changed after the cold boot.

Toggled ALLOW_REBOOT from yes to no in msecgui.  Closed the gui and after discovering that not even root could reboot from a console went back in to msecgui and switched back to 'yes'.  All the {halt,shutdown,reboot,poweroff} off links now point to systemctl.

CC: (none) => tarazed25

Len Lawrence 2016-04-18 18:32:26 CEST

Whiteboard: (none) => MGA5-64-OK

Comment 13 Len Lawrence 2016-04-18 19:16:41 CEST
i586 in virtualbox  Mate

Before update

$ ls -l /bin/{halt,reboot,shutdown,poweroff}
lrwxrwxrwx 1 root root 16 Oct  4  2015 /bin/halt -> ../bin/systemctl
lrwxrwxrwx 1 root root 16 Oct  4  2015 /bin/poweroff -> ../bin/systemctl
lrwxrwxrwx 1 root root 16 Oct  4  2015 /bin/reboot -> ../bin/systemctl
lrwxrwxrwx 1 root root 13 Feb 24 12:25 /bin/shutdown -> consolehelper
 
In msecgui system security toggled ALLOW_REBOOT to 'no'/'yes' and saved the configuration.  No change in the links.  
msecgui does not report updates status.

After update:
msecgui posted the date for the last updtae, which was yesterday.
In system security switched ALLOW_BOOT to 'no', saved the settings then changed back to 'yes' and saved the configuration again.
$ ls -l /bin/{halt,reboot,shutdown,poweroff}
lrwxrwxrwx 1 root root 16 Apr 18 18:12 /bin/halt -> ../bin/systemctl
lrwxrwxrwx 1 root root 16 Apr 18 18:12 /bin/poweroff -> ../bin/systemctl
lrwxrwxrwx 1 root root 16 Apr 18 18:12 /bin/reboot -> ../bin/systemctl
lrwxrwxrwx 1 root root 16 Apr 18 18:12 /bin/shutdown -> ../bin/systemctl

Ready to validate this.
Len Lawrence 2016-04-18 19:17:01 CEST

Whiteboard: MGA5-64-OK => MGA5-64-OK MGA5-32-OK

Len Lawrence 2016-04-18 19:17:13 CEST

Keywords: (none) => validated_update

Comment 14 claire robinson 2016-04-19 10:29:08 CEST
Advisory uploaded. Added reference to bug 16084. 

Please ensure that bug is closed when this is pushed. It *should* happen automatically if I've added the right blocks/depends, can never remember which it uses.

Depends on: (none) => 16084
Whiteboard: MGA5-64-OK MGA5-32-OK => advisory MGA5-64-OK MGA5-32-OK

Thomas Backlund 2016-04-21 17:02:22 CEST

CC: (none) => tmb
Blocks: (none) => 16084
Depends on: 16084 => (none)

Comment 15 Mageia Robot 2016-04-21 17:09:51 CEST
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGAA-2016-0067.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.