[Pkg-ganeti-devel] Bug#613648: ganeti2: Wrong permissions for /var/lock after "gnt-node add"

[Ronny Lindner]

Package: ganeti2
Version: 2.1.6-1
Severity: critical
Tags: patch upstream
Justification: breaks unrelated software


The command "gnt-node add" changes the permissions of /var/lock to "d-wxrwS--t"
(3661 octal, 1777 decimal!). Other programs are not able to create a lockfile
anymore. That was tested with logcheck, which did not work after adding a
ganeti node.

The fix is really simple: there are 3 occurences of 1777 in
/usr/sbin/ganeti-confd and /usr/sbin/ganeti-noded . They must be changed to
01777 .

-- System Information:
Debian Release: 6.0
  APT prefers squeeze-updates
  APT policy: (500, 'squeeze-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/24 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ganeti2 depends on:
ii  bridge-utils            1.4-5            Utilities for configuring the Linu
ii  iproute                 20100519-3       networking and traffic control too
ii  iputils-arping          3:20100418-3     Tool to send ICMP echo requests to
ii  libjs-jquery            1.4.2-2          JavaScript library for dynamic web
ii  lvm2                    2.02.66-5        The Linux Logical Volume Manager
ii  openssh-client          1:5.5p1-6        secure shell (SSH) client, for sec
ii  openssh-server          1:5.5p1-6        secure shell (SSH) server, for sec
ii  openssl                 0.9.8o-4         Secure Socket Layer (SSL) binary a
ii  python                  2.6.6-3+squeeze5 interactive high-level object-orie
ii  python-openssl          0.10-1           Python wrapper around the OpenSSL 
ii  python-pyinotify        0.8.9-1          simple Linux inotify Python bindin
ii  python-pyparsing        1.5.2-2          Python parsing module
ii  python-simplejson       2.1.1-1          simple, fast, extensible JSON enco
ii  python-support          1.0.10           automated rebuilding support for P
ii  socat                   1.7.1.3-1        multipurpose relay for bidirection

Versions of packages ganeti2 recommends:
ii  drbd8-utils                2:8.3.7-2.1   RAID 1 over tcp/ip for Linux utili
ii  ganeti-instance-debootstra 0.9-3         debootstrap-based instance OS defi
ii  qemu-kvm                   0.12.5+dfsg-5 Full virtualization on x86 hardwar

Versions of packages ganeti2 suggests:
pn  drbd8-module-source           <none>     (no description available)

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ganeti.patch
Type: text/x-diff
Size: 1047 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-ganeti-devel/attachments/20110216/2eaddfa2/attachment.patch>