From steve.langasek at canonical.com  Sun Jul  8 06:18:16 2018
From: steve.langasek at canonical.com (Steve Langasek)
Date: Sat, 07 Jul 2018 22:18:16 -0700
Subject: [Pkg-cacti-maint] Bug#903238: cacti: Please run autopkgtest against
 default-mysql-server instead of a specific implementation
Message-ID: <153102709628.2669.3628794193932971743.reportbug@virgil.dodds.net>

Package: cacti
Version: 1.1.38+ds1-1
Severity: minor
Tags: patch
User: ubuntu-devel at lists.ubuntu.com
Usertags: origin-ubuntu cosmic ubuntu-patch

Dear Paul,

In Ubuntu, I've adjusted the autopkgtest for cacti to test against
default-mysql-server instead of mariadb-server.  The reason for this is that
mariadb-server is not the default implementation of mysql-server in Ubuntu,
and mariadb-server was recently buggy on arm64 so not only was it useful to
run the autopkgtest against the mysql-server that we use, it was also useful
to not block against mariadb-server.  Similarly, since you recently dropped
the autopkgtest to test against mysql-server in Debian due to it being
absent from testing, I think it makes sense to only test against the default
mysql implementation in Debian.

Please consider the attached patch for inclusion in Debian.
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                   https://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
diff -Nru cacti-1.1.38+ds1/debian/tests/control cacti-1.1.38+ds1/debian/tests/control
--- cacti-1.1.38+ds1/debian/tests/control	2018-04-18 02:11:55.000000000 -0700
+++ cacti-1.1.38+ds1/debian/tests/control	2018-07-06 15:40:22.000000000 -0700
@@ -1,3 +1,3 @@
 Tests: check-all-pages
-Depends: mariadb-server, @, wget, apache2
+Depends: default-mysql-server, @, wget, apache2
 Restrictions: needs-root, allow-stderr, isolation-container

From office at lnvestmenlnfo.ogicom.pl  Thu Jul 19 09:41:31 2018
From: office at lnvestmenlnfo.ogicom.pl (Mr. Jean Claude Degla)
Date: Thu, 19 Jul 2018 10:41:31 +0200
Subject: [Pkg-cacti-maint] INVESTMENT OFFER
Message-ID: <e83823ea6c5b992e360def0ead2b6797@lnvestmenlnfo.ogicom.pl>

Hello My Dear

INVESTMENT OFFER

We represent a group of Arabs investors who wish to invest important 
funds in a stable economy.
Due to political instability and insecurity in their country, these 
investors are resident in our country.

Below are areas in which these investors want to invest:
*Real estate.
*Renewable energies.
*New technologies of information and communication.
You have a good project related to one of areas mentioned above! Your 
country accepts foreign investors!
Please contact us on the E-mail address: mr.jeanc at hotmail.com  mentioned 
below.
Regards
Mr. Jean Claude Degla
E-Mail: mr.jeanc at hotmail.com


From sven at svenhartge.de  Mon Jul 23 12:31:23 2018
From: sven at svenhartge.de (Sven Hartge)
Date: Mon, 23 Jul 2018 13:31:23 +0200
Subject: [Pkg-cacti-maint] Bug#904332: Enable Linux capabilities support
Message-ID: <153234548305.1544899.10954092602172953875.reportbug@ds9.feds.ath.cx>

Package: cacti-spine
Version: 0.8.8a-1
Severity: normal

Hi!

Please enable support for Linux capabilities in spine.

This is useful so one can use the "ICMP Ping" uptime checker in spine
without needing to set spine setuid-root, just cap_net_raw is enough to
get this working.

Currently this is not enabled because libcap-dev is missing as
build-dependency.

An additional dependency on libcap2-bin is necessary to allow "setcap
cap_net_raw+ep /usr/sbin/spine" to work in postinst.

Grüße,
Sven.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'unstable'), (500, 'testing'), (200, 'experimental'), (1, 'experimental-debug')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 4.16.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8), LANGUAGE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages cacti-spine depends on:
pn  cacti                  <none>
ii  dbconfig-mysql         2.0.9
ii  debconf [debconf-2.0]  1.5.68
ii  libc6                  2.27-5
ii  libmariadbclient18     1:10.1.29-6+b1
ii  libsnmp30              5.7.3+dfsg-3
ii  ucf                    3.0038

cacti-spine recommends no packages.

Versions of packages cacti-spine suggests:
pn  snmp-mibs-downloader  <none>

From elbrus at debian.org  Tue Jul 24 13:32:40 2018
From: elbrus at debian.org (Paul Gevers)
Date: Tue, 24 Jul 2018 14:32:40 +0200
Subject: [Pkg-cacti-maint] Bug#904332: Enable Linux capabilities support
In-Reply-To: <153234548305.1544899.10954092602172953875.reportbug@ds9.feds.ath.cx>
References: <153234548305.1544899.10954092602172953875.reportbug@ds9.feds.ath.cx>
 <153234548305.1544899.10954092602172953875.reportbug@ds9.feds.ath.cx>
Message-ID: <32b0a0be-40ec-759a-1bc3-d35d1097c77b@debian.org>

Hi Sven,

On 23-07-18 13:31, Sven Hartge wrote:
> Please enable support for Linux capabilities in spine.

Thanks for the suggestion.

> This is useful so one can use the "ICMP Ping" uptime checker in spine
> without needing to set spine setuid-root, just cap_net_raw is enough to
> get this working.

Sounds cool. I have zero knowledge of Linux capabilities though. Could
you provide a link to some good (for the noob) documentation on this?

> Currently this is not enabled because libcap-dev is missing as
> build-dependency.

Is that all that's needed?

> An additional dependency on libcap2-bin is necessary to allow "setcap
> cap_net_raw+ep /usr/sbin/spine" to work in postinst.

Can you elaborate? I guess you mean the binary package needs that
dependency manually added by me. And I guess that I should add some code
to the postinst. Where should it go (or doesn't it matter)? Any
drawbacks of doing this for all systems?

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-cacti-maint/attachments/20180724/b04057e7/attachment.sig>

From sven at svenhartge.de  Tue Jul 24 16:30:46 2018
From: sven at svenhartge.de (Sven Hartge)
Date: Tue, 24 Jul 2018 17:30:46 +0200
Subject: [Pkg-cacti-maint] Bug#904332: Enable Linux capabilities support
In-Reply-To: <32b0a0be-40ec-759a-1bc3-d35d1097c77b@debian.org>
References: <153234548305.1544899.10954092602172953875.reportbug@ds9.feds.ath.cx>
 <32b0a0be-40ec-759a-1bc3-d35d1097c77b@debian.org>
 <153234548305.1544899.10954092602172953875.reportbug@ds9.feds.ath.cx>
Message-ID: <a6329157-a053-31bf-8d92-21124996072f@svenhartge.de>

On 24.07.2018 14:32, Paul Gevers wrote:
> On 23-07-18 13:31, Sven Hartge wrote:

>> Please enable support for Linux capabilities in spine.
> 
> Thanks for the suggestion.

Find the changes I suggest on Salsa here:
https://salsa.debian.org/hartge-guest/cacti-spine

I did a test build in a clean chroot for sid-amd64, the resulting
packages look correct from a quick glance.

Grüße,
Sven.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-cacti-maint/attachments/20180724/3798424d/attachment.sig>

From sven at svenhartge.de  Tue Jul 24 16:14:44 2018
From: sven at svenhartge.de (Sven Hartge)
Date: Tue, 24 Jul 2018 17:14:44 +0200 (CEST)
Subject: [Pkg-cacti-maint] Bug#904332: Enable Linux capabilities support
In-Reply-To: <32b0a0be-40ec-759a-1bc3-d35d1097c77b@debian.org>
References: <153234548305.1544899.10954092602172953875.reportbug@ds9.feds.ath.cx>
 <32b0a0be-40ec-759a-1bc3-d35d1097c77b@debian.org>
 <153234548305.1544899.10954092602172953875.reportbug@ds9.feds.ath.cx>
Message-ID: <alpine.DEB.2.21.1807241656170.4829@ds9.feds.ath.cx>

Um 14:32 Uhr am 24.07.18 schrieb Paul Gevers:
> On 23-07-18 13:31, Sven Hartge wrote:

>> This is useful so one can use the "ICMP Ping" uptime checker in spine
>> without needing to set spine setuid-root, just cap_net_raw is enough to
>> get this working.
 
> Sounds cool. I have zero knowledge of Linux capabilities though. Could
> you provide a link to some good (for the noob) documentation on this?

As "usual" with core concepts in Linux, the documentation is a bit sparse.
A good starting point is capabilities(7).

TL,DR: capabilites allow non-privileged programs to do stuff normally only
root is allowed to do, for example use raw sockets or bind to ports <1024,
etc.

>> Currently this is not enabled because libcap-dev is missing as
>> build-dependency.
> 
> Is that all that's needed?

For spine? Yes. When libcap-dev is present and "--enable-lcap" is passed
to configure, it will enable it.

Beware: libcap is a Linux-only thing, kFreeBSD/Hurd would need special handling, like:

ifeq ($(DEB_HOST_ARCH_OS),linux)
CONF_LCAP        += --enable-lcap
endif

override_dh_auto_configure::
        ./configure --host=$(DEB_HOST_GNU_TYPE) \
                       --build=$(DEB_BUILD_GNU_TYPE) \
                       --prefix=/usr \
                       --bindir=/usr/sbin \
                       $(CONF_LCAP) \
                       $(shell dpkg-buildflags --export=configure)

>> An additional dependency on libcap2-bin is necessary to allow "setcap
>> cap_net_raw+ep /usr/sbin/spine" to work in postinst.
> 
> Can you elaborate? I guess you mean the binary package needs that
> dependency manually added by me. And I guess that I should add some code
> to the postinst. Where should it go (or doesn't it matter)? Any
> drawbacks of doing this for all systems?

"libcap2-bin [linux-any]" has to be added manually, either as a hard Depends: or
Recommends:, there is not fancy debhelper automatism doing this.

iputils-ping does the latter and then checks in its postinst if setcap is
available:

,----
| if [ "$1" = configure ]; then
|     # If we have setcap is installed, try setting cap_net_raw+ep,
|     # which allows us to install our binaries without the setuid
|     # bit.
|     if command -v setcap > /dev/null; then
|         if setcap cap_net_raw+ep /bin/ping; then
|             chmod u-s /bin/ping
|         else
|             echo "Setcap failed on /bin/ping, falling back to setuid" >&2
|             chmod u+s /bin/ping
|         fi
|     else
|         echo "Setcap is not installed, falling back to setuid" >&2
|         chmod u+s /bin/ping
|     fi
| fi
`----

This approach would also work without changes for the !Linux archs out
there, if you decide to use a hard "Depends:".

You can of course skip the "chmod u+s" part, then without setcap present
spine would behave just like it does today.

I have build a local test-package without the postinst code to test if the
capabilities support for spine works as designed and confirm it working
correctly after manually setting cap_net_raw+ep.

Grüße,
Sven.


From ftpmaster at ftp-master.debian.org  Wed Jul 25 14:20:16 2018
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Wed, 25 Jul 2018 13:20:16 +0000
Subject: [Pkg-cacti-maint] Processing of cacti-spine_1.1.37-2_source.changes
Message-ID: <E1fiJiC-0007Z1-S7@usper.debian.org>

cacti-spine_1.1.37-2_source.changes uploaded successfully to localhost
along with the files:
  cacti-spine_1.1.37-2.dsc
  cacti-spine_1.1.37-2.debian.tar.xz

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Wed Jul 25 14:34:19 2018
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Wed, 25 Jul 2018 13:34:19 +0000
Subject: [Pkg-cacti-maint] cacti-spine_1.1.37-2_source.changes ACCEPTED into
 unstable
Message-ID: <E1fiJvn-0004E9-Dg@fasolo.debian.org>



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 25 Jul 2018 13:44:33 +0200
Source: cacti-spine
Binary: cacti-spine
Architecture: source
Version: 1.1.37-2
Distribution: unstable
Urgency: medium
Maintainer: Cacti Maintainer <pkg-cacti-maint at lists.alioth.debian.org>
Changed-By: Paul Gevers <elbrus at debian.org>
Description:
 cacti-spine - Multi-Threading poller for cacti
Closes: 904332
Changes:
 cacti-spine (1.1.37-2) unstable; urgency=medium
 .
   [ Sven Hartge ]
   * Enable usage of Linux capabilities (Closes: #904332)
 .
   [ Paul Gevers]
   * Update Vcs-* fields
Checksums-Sha1:
 23d633aa8bf0a8a5daab1225e2d145359d5e32f0 1689 cacti-spine_1.1.37-2.dsc
 c63a5632c7da13511b60aed3b395d466c4eb5715 14988 cacti-spine_1.1.37-2.debian.tar.xz
Checksums-Sha256:
 bad4de8a50b72ac92c89bc4be4efde51810f540426927b2affbfeab854798eb0 1689 cacti-spine_1.1.37-2.dsc
 4850e08a8764233ef6de973301002e5af543df6666a62a677e004f5afc9ed019 14988 cacti-spine_1.1.37-2.debian.tar.xz
Files:
 c6155d3c682030a3294905753064f097 1689 web optional cacti-spine_1.1.37-2.dsc
 49952b715bee486f45f1a8a967a6d8f4 14988 web optional cacti-spine_1.1.37-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAltYda8ACgkQnFyZ6wW9
dQq/GAf+MQlHZ/olYwv7ceIxVX8RqDzwihqoFfOjZhWW0qeOWs2F65QzFDrq5E8D
IU1ACi6+6RHaKdbA5AoZV547H5qO1rLOfoR6qzrmVoy3nK4NFntN0r2KTL9mVNZt
+KLHfLclhCSS0hg8C1qxfB+ke5fhoDMo7ME06XB+6jOqYj9qvp+ozPQ5h22H1ivn
nrijRj7bTLMjQTV4VHlv1EWe5pGM9+BDtP2YbRn3UQtNJlYp30A3dZA+XA75wZrf
UYl02+ZBinnAN1ZWDXTOoyl1otAeg3sxXpsh4eXdyFIrgRHCYqrtjWlVpN8/kI4K
ZXOfqPXs6yJNW+jOq4it2VrbE7/uzg==
=otCM
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From owner at bugs.debian.org  Wed Jul 25 14:39:04 2018
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Wed, 25 Jul 2018 13:39:04 +0000
Subject: [Pkg-cacti-maint] Bug#904332: marked as done (Enable Linux
 capabilities support)
References: <E1fiJvn-0004EJ-G9@fasolo.debian.org>
 <153234548305.1544899.10954092602172953875.reportbug@ds9.feds.ath.cx>
Message-ID: <handler.904332.D904332.153252566123843.ackdone@bugs.debian.org>

Your message dated Wed, 25 Jul 2018 13:34:19 +0000
with message-id <E1fiJvn-0004EJ-G9 at fasolo.debian.org>
and subject line Bug#904332: fixed in cacti-spine 1.1.37-2
has caused the Debian Bug report #904332,
regarding Enable Linux capabilities support
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
904332: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904332
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Sven Hartge <sven at svenhartge.de>
Subject: Enable Linux capabilities support
Date: Mon, 23 Jul 2018 13:31:23 +0200
Size: 3833
URL: <http://alioth-lists.debian.net/pipermail/pkg-cacti-maint/attachments/20180725/9fd5a76b/attachment.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Paul Gevers <elbrus at debian.org>
Subject: Bug#904332: fixed in cacti-spine 1.1.37-2
Date: Wed, 25 Jul 2018 13:34:19 +0000
Size: 4580
URL: <http://alioth-lists.debian.net/pipermail/pkg-cacti-maint/attachments/20180725/9fd5a76b/attachment-0001.mht>

From willem at istores.co.za  Fri Jul 27 21:36:33 2018
From: willem at istores.co.za (willem at istores.co.za)
Date: Sat, 28 Jul 2018 02:06:33 +0530
Subject: [Pkg-cacti-maint] can we discuss
Message-ID: <E1fj9Tw-000P0O-Dm@www427.jnb1.host-h.net>



From noreply at release.debian.org  Mon Jul 30 05:39:08 2018
From: noreply at release.debian.org (Debian testing watch)
Date: Mon, 30 Jul 2018 04:39:08 +0000
Subject: [Pkg-cacti-maint] cacti-spine 1.1.37-2 MIGRATED to testing
Message-ID: <E1fjzxc-0003ST-QU@respighi.debian.org>

FYI: The status of the cacti-spine source package
in Debian's testing distribution has changed.

  Previous version: 1.1.37-1
  Current version:  1.1.37-2

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From dami at hispeed.ch  Mon Jul 30 15:09:21 2018
From: dami at hispeed.ch (Mrs Ruth Henry)
Date: Mon, 30 Jul 2018 16:09:21 +0200 (CEST)
Subject: [Pkg-cacti-maint] Greetings,From Mrs Ruth
Message-ID: <1003334391.176396.1532959761563@upcmail.hispeed.ch>

My name is Mrs Ruth Henry a widow, I found your email address through my late husbands internet dater late Mr. Mr Henry Amos ,

I decided to donate this fund to a good person that will utilize it the way i am going to instruct herein. I need a very honest and Lord fearing person  who can claim this money and use it for Charity works, for orphanages and gives justice and help to the poor, needy and widows says The Lord."also build schools for less privilege that will be named after my late husband if possible and to promote the word of Lord and the effort that the house of Lord is maintained.

I am presently admitted at the hospital suffering from a blood cancer and Parkinson diseases. I have only about a few months to live and I want you to Transfer the sum of ( $7.500,000.00) united states dollars to your account so you can assist me Distribute my funds to charity homes in your country ,

I will give you more information on how the fund will be transferred to your bank account. May the grace, peace, love and the truth in the Word of Lord be with you and all those that you love and  care for. In the name of Yeshua Ha Mashiach,

Please Please contact me to my direct email ( mrs_sisterruth2002 @outlook.fr

May Lord Bless you

Mrs Ruth Henry
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-cacti-maint/attachments/20180730/599f06af/attachment.html>

