Bug#333627: marked as done (Purging package does not remove Debian-exim user)

Debian Bug Tracking System owner at bugs.debian.org
Thu Oct 13 14:03:45 UTC 2005


Your message dated Thu, 13 Oct 2005 15:58:40 +0200
with message-id <20051013135840.GD9965 at torres.l21.ma.zugschlus.de>
and subject line Bug#333627: Purging package does not remove Debian-exim user
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 13 Oct 2005 00:41:55 +0000
>From gcbirzan at rdsct.ro Wed Oct 12 17:41:55 2005
Return-path: <gcbirzan at rdsct.ro>
Received: from ns2.rdsct.ro (rdsct.ro) [212.93.137.18] 
	by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
	id 1EPrAR-0002S3-00; Wed, 12 Oct 2005 17:41:55 -0700
Received: (qmail 1081 invoked by uid 89); 13 Oct 2005 00:39:58 -0000
Received: from unknown (HELO hephaestus.rdsct.ro) (212.93.141.56)
  by 0 with (AES256-SHA encrypted) SMTP; 13 Oct 2005 00:39:58 -0000
Received: from gcbirzan by hephaestus.rdsct.ro with local (Exim 4.54)
	id 1EPrAO-0006tg-By; Thu, 13 Oct 2005 03:41:52 +0300
Date: Thu, 13 Oct 2005 03:41:52 +0300
From: George-Cristian =?iso-8859-1?Q?B=EErzan?= <gcbirzan at rdsct.ro>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: Purging package does not remove Debian-exim user
Message-ID: <20051013004152.GA26504 at hephaestus.rdsct.ro>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0OAP2g/MAC+5xKAE"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
X-Reportbug-Version: 3.17
User-Agent: Mutt/1.5.11
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02


--0OAP2g/MAC+5xKAE
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Package: exim4-config
Version: 4.54-1
Severity: normal
Tags: patch

There's a # that needs to be removed in the postrm script for that to
happen.

-- Package-specific info:
Exim version 4.54 #1 built 04-Oct-2005 10:01:38
Copyright (c) University of Cambridge 2005
Berkeley DB: Sleepycat Software: Berkeley DB 4.2.52: (December  3, 2003)
Support for: crypteq iconv() IPv6 GnuTLS
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dsearch nis nis0 passwd
Authenticators: cram_md5 plaintext
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore autoreply lmtp pipe smtp
Fixed never_users: 0
Configuration file is /var/lib/exim4/config.autogenerated
# /etc/exim4/update-exim4.conf.conf
#
# Edit this file and /etc/mailname by hand and execute update-exim4.conf
# yourself or use 'dpkg-reconfigure exim4-config'
#
# Please note that this is _not_ a dpkg-conffile and that automatic changes
# to this file might happen. The code handling this will honor your local
# changes, so this is usually fine, but will break local schemes that mess
# around with multiple versions of the file.
#
# update-exim4.conf uses this file to determine variable values to replace
# the DEBCONFsomethingDEBCONF strings in the configuration template files.
#
# Most settings found in here do have corresponding questions in the
# Debconf configuration, but not all of them.
#
# This is a Debian specific file

dc_eximconfig_configtype='smarthost'
dc_other_hostnames='hephaestus.rdsct.ro rdsct.ro'
dc_local_interfaces='127.0.0.1'
dc_readhost='hephaestus.rdsct.ro'
dc_relay_domains=''
dc_minimaldns='false'
dc_relay_nets=''
dc_smarthost='mail.rdsct.ro'
CFILEMODE='644'
dc_use_split_config='true'
dc_hide_mailname='true'
dc_mailname_in_oh='true'
mailname:hephaestus.rdsct.ro

-- System Information:
Debian Release: testing/unstable
  APT prefers experimental
  APT policy: (500, 'experimental'), (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-686-smp
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)

Versions of packages exim4-config depends on:
ii  adduser                       3.71       Add and remove users and groups
ii  debconf [debconf-2.0]         1.4.58     Debian configuration management sy

exim4-config recommends no packages.

-- debconf information:
  exim4/dc_noalias_regenerate: false
* exim4/dc_smarthost: mail.rdsct.ro
  exim4/dc_relay_domains:
* exim4/dc_relay_nets:
* exim4/mailname: hephaestus.rdsct.ro
* exim4/dc_local_interfaces: 127.0.0.1
* exim4/dc_minimaldns: false
  exim4/exim3_upgrade: true
* exim4/dc_other_hostnames: hephaestus.rdsct.ro rdsct.ro
* exim4/dc_eximconfig_configtype: mail sent by smarthost; received via SMTP or fetchmail
* exim4/no_config: true
* exim4/hide_mailname: true
* exim4/dc_postmaster: gcbirzan
* exim4/dc_readhost: hephaestus.rdsct.ro
* exim4/use_split_config: true
  exim4/internal/exim4-config.reconfigure: false
  exim4/exim4-config-title:

-- 
George-Cristian Bîrzan
Network Engineer
_______________________________________
RCS & RDS Constanta
Tel.: +40341.400.401 / +40341.400.402
Fax: +40341.400.450
http://www.rcs-rds.ro
_______________________________________

Privileged/Confidential Information may be contained in this message. If you
are not the addressee indicated in this message (or responsible for delivery
of the message to such person), you may not copy or deliver this message to
anyone. In such a case, you should destroy this message and kindly notify
the sender by reply e-mail.


--0OAP2g/MAC+5xKAE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="debian-exim.patch"

--- /var/lib/dpkg/info/exim4-config.postrm	2005-10-04 13:03:21.000000000 +0300
+++ exim4-config.postrm	2005-10-13 03:40:31.957343795 +0300
@@ -23,7 +23,7 @@
 		/etc/exim4 /var/lib/exim4 2> /dev/null || true
 	rm -f /etc/default/exim4
 	# remove user
-	#deluser  --quiet Debian-exim > /dev/null || true
+	deluser  --quiet Debian-exim > /dev/null || true
 	;;
 esac
 

--0OAP2g/MAC+5xKAE--

---------------------------------------
Received: (at 333627-done) by bugs.debian.org; 13 Oct 2005 13:58:42 +0000
>From mh+debian-packages at zugschlus.de Thu Oct 13 06:58:42 2005
Return-path: <mh+debian-packages at zugschlus.de>
Received: from 5301d.unt0.torres.l21.ma.zugschlus.de (torres.zugschlus.de) [217.151.83.1] (Debian-exim)
	by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
	id 1EQ3bW-0005xM-00; Thu, 13 Oct 2005 06:58:42 -0700
Received: from mh by torres.zugschlus.de with local (Exim 4.54)
	id 1EQ3bU-0001Uo-Hz; Thu, 13 Oct 2005 15:58:40 +0200
Date: Thu, 13 Oct 2005 15:58:40 +0200
From: Marc Haber <mh+debian-packages at zugschlus.de>
To: George-Cristian =?iso-8859-1?Q?B=EErzan?= <gcbirzan at rdsct.ro>,
	333627-done at bugs.debian.org
Subject: Re: Bug#333627: Purging package does not remove Debian-exim user
Message-ID: <20051013135840.GD9965 at torres.l21.ma.zugschlus.de>
References: <20051013004152.GA26504 at hephaestus.rdsct.ro>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <20051013004152.GA26504 at hephaestus.rdsct.ro>
User-Agent: Mutt/1.5.9i
Delivered-To: 333627-done at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

On Thu, Oct 13, 2005 at 03:41:52AM +0300, George-Cristian Bîrzan wrote:
> Subject: Re: Bug#333627: Purging package does not remove Debian-exim user
> There's a # that needs to be removed in the postrm script for that to
> happen.

That's - unfortunately - a feature and best current practice. There
might still be files around belonging to Debian-exim, and removing it
might cause its UID to be re-used at a later time, which in turn can
result in data exposure.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835



More information about the Pkg-exim4-maintainers mailing list