Bug 7876 - Changes needed to allow inn to start.
Summary: Changes needed to allow inn to start.
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 2
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA2-64-OK MGA2-32-OK
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2012-10-22 22:36 CEST by Dave Hodgins
Modified: 2013-07-26 13:58 CEST (History)
5 users (show)

See Also:
Source RPM: inn-2.5.3-1.mga2.src.rpm
CVE:
Status comment:


Attachments
Output of "inncheck -f -perm". (11.94 KB, text/plain)
2012-10-22 22:37 CEST, Dave Hodgins
Details

Description Dave Hodgins 2012-10-22 22:36:05 CEST
As reported in bug 7674, a number of changes are needed, to
allow the inn service to start, including permission and path
changes.  I'll add more details shortly.
Comment 1 Dave Hodgins 2012-10-22 22:37:19 CEST
Created attachment 2977 [details]
Output of "inncheck -f -perm".
Comment 2 Dave Hodgins 2012-10-22 22:55:38 CEST
The script innshellvars is in /usr/bin, but ...

grep -I /usr/lib64/inn/news /usr/bin/* 2>/dev/null
/usr/bin/actmerge:. /usr/lib64/inn/news/innshellvars
/usr/bin/actsyncd:. /usr/lib64/inn/news/innshellvars
/usr/bin/controlbatch:. /usr/lib64/inn/news/innshellvars
/usr/bin/docheckgroups:. /usr/lib64/inn/news/innshellvars
/usr/bin/expirerm:. /usr/lib64/inn/news/innshellvars
/usr/bin/innstat:. /usr/lib64/inn/news/innshellvars
/usr/bin/innwatch:. /usr/lib64/inn/news/innshellvars
/usr/bin/news.daily:. /usr/lib64/inn/news/innshellvars
/usr/bin/nntpsend:. /usr/lib64/inn/news/innshellvars
/usr/bin/scanlogs:. /usr/lib64/inn/news/innshellvars
/usr/bin/send-ihave:. /usr/lib64/inn/news/innshellvars
/usr/bin/send-nntp:. /usr/lib64/inn/news/innshellvars
/usr/bin/sendxbatches:. /usr/lib64/inn/news/innshellvars
/usr/bin/tally.control:. /usr/lib64/inn/news/innshellvars
/usr/bin/writelog:. /usr/lib64/inn/news/innshellvars

For testing of bug 7674, I've used ...
# mkdir -p /usr/lib64/inn/news
# ln -s /usr/bin/innshellvars /usr/lib64/inn/news/

Probably better to fix the scripts in /usr/bin/listed above.
Comment 3 Dave Hodgins 2012-10-22 23:14:37 CEST
To fix the problems shown by inncheck, I've used

# ln -s /etc/rc.news /usr/bin/
# inncheck -f -perm | /bin/sh

I've also deleted the line
[ -d /usr/lib/news ] || exit 0
from /etc/init.d/innd, as the directory does not exist on a 64 bit install.
Comment 4 David Walser 2012-10-23 02:57:34 CEST
Oden, is this change you made in Cauldron correct?

-         --with-berkeleydb=/usr/include/db4 \
+         --with-berkeleydb=%{_prefix} \

CC: (none) => luigiwalser
Assignee: bugsquad => oe

Comment 5 Oden Eriksson 2012-10-24 09:23:43 CEST
It makes no difference as neither finds a suitable ndbm.h. I don't know when that worked, 5-10 years ago?
Comment 6 David Walser 2012-10-24 13:59:14 CEST
Probably, it's in libdb1-devel, so that would be pretty old.

I wonder if it's buildable against gdbm, since it has that header too.
Comment 7 Oden Eriksson 2012-10-24 14:35:43 CEST
Probably, but the point is that this is a non issue as db support hasn't been there for many years.
Comment 8 Remco Rijnders 2012-12-29 14:42:06 CET
@Dave, thanks for all your testing on this package. I have taken most of your findings and have now created a new inn-2.5.3-2.mga2 package. This one should hopefully start out of the box!

CC: (none) => remco
Assignee: oe => qa-bugs

David Walser 2012-12-29 18:29:48 CET

Version: Cauldron => 2

Comment 9 Dave Hodgins 2013-01-28 02:40:34 CET
Thanks.  Finally got around to testing this.  Everything looks good, without
running inncheck, but if people are used to running it ...
# inncheck -f -perm|sort -u
chgrp news /usr/bin
chgrp news /usr/bin/inews
chgrp news /usr/lib64
chgrp news /usr/tmp
chmod 550 /usr/bin/inews
chmod 775 /usr/tmp
chown news /etc/news/incoming.conf
chown news /usr/bin
chown news /usr/bin/inews
chown news /usr/lib64
chown news /usr/tmp

As it is, it will make many things rw, for the news daemon, that shouldn't be.

In my opinion, the script should be removed, changed into a no-op, or
modified not to try and make the above modifications.

Whiteboard: (none) => feedback

Comment 10 Dave Hodgins 2013-01-28 02:50:32 CET
Also notice the inncheck script reports # /usr/bin/rc.news:0: missing.
rc.news is in /etc, not /usr/bin.
Comment 11 claire robinson 2013-02-06 11:54:04 CET
Assigning Remco. Could you please take a look at Dave's comments above.

Please re-assign to QA when you're ready.

Thanks!

CC: (none) => qa-bugs
Assignee: qa-bugs => remco

Comment 12 David Walser 2013-02-12 01:55:13 CET
Sorry to piggyback on this mga2 bug, but Remco, just in case you missed it on IRC, another issue with this package in Cauldron:

there's a conflict between inn and leafnode, as they have /var/spool/news with 775 and 755 perms, respectively.  They should be the same, or the packages should explicitly conflict.

The permissions should probably be 755 unless there's a good reason otherwise.
Comment 13 Remco Rijnders 2013-06-23 15:39:32 CEST
Sorry for the long delay. Version inn-2.5.3-3.2.mga2 is available in updates_testing now. It addresses the issue David raised in comment #12.

Dave's findings under comment #9 does not impact the functionality of the program, and half of them seem to be incorrect (like changing ownership of /usr/bin). For comment #10, I believe the inncheck script to actually be in error.

Can we stamp an approval on this one please so those who want to run inn at least can run it using an official Mageia package? :-)

Assignee: remco => qa-bugs

Comment 14 claire robinson 2013-07-15 18:19:40 CEST
Oops feedback tag was left on, sorry.

Whiteboard: feedback => (none)

Comment 15 Dave Hodgins 2013-07-19 23:57:09 CEST
Advisory 7876.adv uploaded to svn
Comment 16 Dave Hodgins 2013-07-21 23:15:45 CEST
Testing complete on Mageia 2 i586 and x86_64 using procdure attachment 2979 [details]

Could someone from the sysadmin team push 7876.adv to updates.

Keywords: (none) => validated_update
Whiteboard: (none) => MGA2-64-OK MGA2-32-OK
CC: (none) => sysadmin-bugs

Comment 17 Thomas Backlund 2013-07-26 13:58:03 CEST
Update pushed:
http://advisories.mageia.org/MGAA-2013-0069.html

Status: NEW => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.