[Secure-testing-team] Bug#771348: needrestart: starts not running services
Christoph Anton Mitterer
calestyo at scientia.net
Fri Nov 28 18:06:04 UTC 2014
Package: needrestart
Version: 1.2-5
Severity: critical
Tags: security
Hi.
Apparently needrestart has some bug, which causes it to
start not running services.
I have e.g.:
$ ps ax | grep ssh
2927 pts/4 S+ 0:00 ssh kronecker
2939 ? Ss 0:00 ssh: /home/calestyo/.ssh/control-mux/heisenberg_root at kronecker.example.org:22 [mux]
3026 pts/3 S+ 0:00 ssh klenze
4257 ? Ss 0:00 /usr/bin/ssh-agent /usr/bin/dbus-launch --exit-with-session cinnamon-session-cinnamon
17048 pts/5 S+ 0:00 grep --color=auto ssh
=> as you can see, no sshd is running
Then I run:
# needrestart -v
[Core] Using UI 'NeedRestart::UI::stdio'...
[main] detected systemd
[main] #1749 uses obsolete /lib/x86_64-linux-gnu/libpng12.so.0.50.0
[main] #1749 is not a child
[main] #1879 uses obsolete /lib/x86_64-linux-gnu/liblzma.so.5.0.0
[main] #1879 is not a child
[main] #1910 uses obsolete /lib/x86_64-linux-gnu/liblzma.so.5.0.0
[main] #1910 is not a child
[Core] #1933 is a NeedRestart::Interp::Python
[main] #1977 uses obsolete /usr/lib/x86_64-linux-gnu/libcroco-0.6.so.3.0.1
[main] #1977 is not a child
[main] #2009 uses obsolete /lib/x86_64-linux-gnu/security/pam_systemd.so
[main] #2009 is a child of #1982
[main] #2062 uses obsolete binary /usr/bin/python2.7
[main] #2062 is not a child
[main] #2540 uses obsolete /lib/x86_64-linux-gnu/liblzma.so.5.0.0
[main] #2540 is not a child
[main] #2608 uses obsolete /lib/x86_64-linux-gnu/libpng12.so.0.50.0
[main] #2608 is a child of #2540
[main] #2620 uses obsolete /usr/lib/x86_64-linux-gnu/libidn.so.11.6.12
[main] #2620 is not a child
[main] #2621 uses obsolete /usr/lib/x86_64-linux-gnu/libidn.so.11.6.12
[main] #2621 is a child of #2620
[main] #2649 uses obsolete /usr/lib/x86_64-linux-gnu/libFLAC.so.8.3.0
[main] #2649 is not a child
[main] #2763 uses obsolete /usr/lib/x86_64-linux-gnu/libidn.so.11.6.12
[main] #2763 is not a child
[main] #2764 uses obsolete /usr/lib/x86_64-linux-gnu/libidn.so.11.6.12
[main] #2764 is a child of #2763
[main] #2782 uses obsolete /usr/lib/x86_64-linux-gnu/libFLAC.so.8.3.0
[main] #2782 is not a child
[main] #2927 uses obsolete /lib/x86_64-linux-gnu/libkeyutils.so.1.5
[main] #2927 is a child of #2897
[main] #2939 uses obsolete /lib/x86_64-linux-gnu/libkeyutils.so.1.5
[main] #2939 is not a child
[main] #3026 uses obsolete /lib/x86_64-linux-gnu/libkeyutils.so.1.5
[main] #3026 is a child of #2806
[main] #4208 uses obsolete /lib/x86_64-linux-gnu/security/pam_systemd.so
[main] #4208 is a child of #2540
[main] #4217 uses obsolete /lib/x86_64-linux-gnu/libz.so.1.2.8
[main] #4217 is not a child
[main] #4220 uses obsolete /lib/x86_64-linux-gnu/libudev.so.1.5.0
[main] #4220 is a child of #4208
[main] #4261 uses obsolete /lib/x86_64-linux-gnu/liblzma.so.5.0.0
[main] #4261 is not a child
[main] #4270 uses obsolete /lib/x86_64-linux-gnu/libz.so.1.2.8
[main] #4270 is not a child
[main] #4278 uses obsolete /lib/x86_64-linux-gnu/libkeyutils.so.1.5
[main] #4278 is a child of #4220
[main] #4294 uses obsolete /lib/x86_64-linux-gnu/libudev.so.1.5.0
[main] #4294 is not a child
[main] #4296 uses obsolete /lib/x86_64-linux-gnu/libpng12.so.0.50.0
[main] #4296 is not a child
[main] #4300 uses obsolete /lib/x86_64-linux-gnu/libudev.so.1.5.0
[main] #4300 is not a child
[main] #4315 uses obsolete /lib/x86_64-linux-gnu/libpng12.so.0.50.0
[main] #4315 is not a child
[main] #4328 uses obsolete /lib/x86_64-linux-gnu/libpng12.so.0.50.0
[main] #4328 is not a child
[main] #4332 uses obsolete /lib/x86_64-linux-gnu/libpng12.so.0.50.0
[main] #4332 is not a child
[main] #4336 uses obsolete /lib/x86_64-linux-gnu/libpng12.so.0.50.0
[main] #4336 is not a child
[main] #4341 uses obsolete /lib/x86_64-linux-gnu/libpng12.so.0.50.0
[main] #4341 is not a child
[main] #4344 uses obsolete binary /usr/bin/python2.7
[main] #4344 is a child of #4220
[main] #4348 uses obsolete /lib/x86_64-linux-gnu/libkeyutils.so.1.5
[main] #4348 is not a child
[main] #4353 uses obsolete /usr/lib/x86_64-linux-gnu/libgudev-1.0.so.0.2.0
[main] #4353 is a child of #4344
[main] #4359 uses obsolete /lib/x86_64-linux-gnu/libudev.so.1.5.0
[main] #4359 is a child of #4220
[main] #4360 uses obsolete /usr/lib/x86_64-linux-gnu/libcroco-0.6.so.3.0.1
[main] #4360 is a child of #4220
[main] #4362 uses obsolete /lib/x86_64-linux-gnu/libudev.so.1.5.0
[main] #4362 is a child of #4220
[main] #4363 uses obsolete /lib/x86_64-linux-gnu/libudev.so.1.5.0
[main] #4363 is a child of #4361
[main] #4364 uses obsolete /usr/lib/x86_64-linux-gnu/libcroco-0.6.so.3.0.1
[main] #4364 is a child of #4220
[main] #4374 uses obsolete /lib/x86_64-linux-gnu/libz.so.1.2.8
[main] #4374 is not a child
[main] #4383 uses obsolete /lib/x86_64-linux-gnu/libz.so.1.2.8
[main] #4383 is not a child
[main] #4390 uses obsolete /lib/x86_64-linux-gnu/libudev.so.1.5.0
[main] #4390 is not a child
[main] #4406 uses obsolete /lib/x86_64-linux-gnu/libpng12.so.0.50.0
[main] #4406 is not a child
[main] #4472 uses obsolete /usr/lib/x86_64-linux-gnu/libcroco-0.6.so.3.0.1
[main] #4472 is a child of #4220
[main] #4476 uses obsolete binary /usr/bin/python2.7
[main] #4476 is a child of #4220
[main] #4622 uses obsolete /usr/lib/x86_64-linux-gnu/libFLAC.so.8.3.0
[main] #4622 is not a child
[main] #4818 uses obsolete /usr/lib/x86_64-linux-gnu/libidn.so.11.6.12
[main] #4818 is not a child
[main] #4961 uses obsolete /lib/x86_64-linux-gnu/libudev.so.1.5.0
[main] #4961 is not a child
[main] #1749 exe => /usr/lib/gvfs/gvfsd-metadata
[main] #1749 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #1749 running /etc/needrestart/hook.d/10-dpkg
[main] #1749 package: gvfs-daemons
[main] #1749 running /etc/needrestart/hook.d/20-rpm
[main] #1749 running /etc/needrestart/hook.d/90-none
[main] #1879 exe => /usr/sbin/NetworkManager
[main] #1879 is NetworkManager.service
[main] #1910 exe => /usr/bin/dbus-daemon
[main] #1910 is dbus.service
[main] #1977 exe => /usr/lib/gnome-terminal/gnome-terminal-server
[main] #1977 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #1977 running /etc/needrestart/hook.d/10-dpkg
[main] #1977 package: gnome-terminal
[main] #1977 running /etc/needrestart/hook.d/20-rpm
[main] #1977 running /etc/needrestart/hook.d/90-none
[main] #1982 exe => /bin/bash
[main] #1982 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #1982 running /etc/needrestart/hook.d/10-dpkg
[main] #1982 package: bash
[main] #1982 running /etc/needrestart/hook.d/20-rpm
[main] #1982 running /etc/needrestart/hook.d/90-none
[main] #2062 exe => /usr/bin/python2.7
[Core] #2062 is a NeedRestart::Interp::Python
[Core] #2062 source is /usr/share/virt-manager/virt-manager
[main] #2062 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #2062 running /etc/needrestart/hook.d/10-dpkg
[main] #2062 package: virt-manager
[main] #2062 running /etc/needrestart/hook.d/20-rpm
[main] #2062 running /etc/needrestart/hook.d/90-none
[main] #2540 exe => /usr/sbin/gdm3
[main] #2540 is gdm.service
[main] #2620 exe => /usr/sbin/dnsmasq
[main] #2620 is libvirtd.service
[main] #2649 exe => /usr/bin/qemu-system-x86_64
[main] #2649 unexpected cgroup '/machine.slice/machine-qemu\x2dklenze.scientia.net_Debian\x2damd64\x2dunstable.scope'
[main] #2649 running /etc/needrestart/hook.d/10-dpkg
[main] #2649 package: qemu-system-x86
[main] #2649 rc.d script qemu-system-x86 should not start in the current run-level(5)
[main] #2649 running /etc/needrestart/hook.d/20-rpm
[main] #2649 running /etc/needrestart/hook.d/90-none
[main] #2763 exe => /usr/sbin/dnsmasq
[main] #2763 is libvirtd.service
[main] #2782 exe => /usr/bin/qemu-system-x86_64
[main] #2782 unexpected cgroup '/machine.slice/machine-qemu\x2dWindows\x2d7.scope'
[main] #2782 running /etc/needrestart/hook.d/10-dpkg
[main] #2782 package: qemu-system-x86
[main] #2782 rc.d script qemu-system-x86 should not start in the current run-level(5)
[main] #2782 running /etc/needrestart/hook.d/20-rpm
[main] #2782 running /etc/needrestart/hook.d/90-none
[main] #2806 exe => /bin/bash
[main] #2806 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #2806 running /etc/needrestart/hook.d/10-dpkg
[main] #2806 package: bash
[main] #2806 running /etc/needrestart/hook.d/20-rpm
[main] #2806 running /etc/needrestart/hook.d/90-none
[main] #2897 exe => /bin/bash
[main] #2897 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #2897 running /etc/needrestart/hook.d/10-dpkg
[main] #2897 package: bash
[main] #2897 running /etc/needrestart/hook.d/20-rpm
[main] #2897 running /etc/needrestart/hook.d/90-none
[main] #2939 exe => /usr/bin/ssh
[main] #2939 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #2939 running /etc/needrestart/hook.d/10-dpkg
[main] #2939 package: openssh-client
[main] #2939 running /etc/needrestart/hook.d/20-rpm
[main] #2939 running /etc/needrestart/hook.d/90-none
[main] #2939 package: ssh
[main] no pidfile reference found at ssh
[main] #4208 exe => /usr/lib/gdm3/gdm-session-worker
[main] #4208 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4208 running /etc/needrestart/hook.d/10-dpkg
[main] #4208 package: gdm3
[main] no pidfile reference found at gdm3
[main] #4217 exe => /usr/bin/gnome-keyring-daemon
[main] #4217 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4217 running /etc/needrestart/hook.d/10-dpkg
[main] #4217 package: gnome-keyring
[main] #4217 running /etc/needrestart/hook.d/20-rpm
[main] #4217 running /etc/needrestart/hook.d/90-none
[main] #4220 exe => /usr/bin/cinnamon-session
[main] #4220 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4220 running /etc/needrestart/hook.d/10-dpkg
[main] #4220 package: cinnamon-session
[main] #4220 running /etc/needrestart/hook.d/20-rpm
[main] #4220 running /etc/needrestart/hook.d/90-none
[main] #4261 exe => /usr/bin/dbus-daemon
[main] #4261 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4261 running /etc/needrestart/hook.d/10-dpkg
[main] #4261 package: dbus
[main] no pidfile reference found at dbus
[main] #4261 rc.d script dbus seems to be superseeded by dbus.service
[main] #4270 exe => /usr/lib/at-spi2-core/at-spi2-registryd
[main] #4270 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4270 running /etc/needrestart/hook.d/10-dpkg
[main] #4270 package: at-spi2-core
[main] #4270 running /etc/needrestart/hook.d/20-rpm
[main] #4270 running /etc/needrestart/hook.d/90-none
[main] #4294 exe => /usr/bin/pulseaudio
[main] #4294 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4294 running /etc/needrestart/hook.d/10-dpkg
[main] #4294 package: pulseaudio
[main] #4294 running /etc/needrestart/hook.d/20-rpm
[main] #4294 running /etc/needrestart/hook.d/90-none
[main] #4296 exe => /usr/lib/gvfs/gvfsd
[main] #4296 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4296 running /etc/needrestart/hook.d/10-dpkg
[main] #4296 package: gvfs-daemons
[main] #4296 running /etc/needrestart/hook.d/20-rpm
[main] #4296 running /etc/needrestart/hook.d/90-none
[main] #4300 exe => /usr/lib/gvfs/gvfsd-fuse
[main] #4300 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4300 running /etc/needrestart/hook.d/10-dpkg
[main] #4300 package: gvfs-fuse
[main] #4300 running /etc/needrestart/hook.d/20-rpm
[main] #4300 running /etc/needrestart/hook.d/90-none
[main] #4315 exe => /usr/lib/gvfs/gvfs-udisks2-volume-monitor
[main] #4315 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4315 running /etc/needrestart/hook.d/10-dpkg
[main] #4315 package: gvfs-daemons
[main] #4315 running /etc/needrestart/hook.d/20-rpm
[main] #4315 running /etc/needrestart/hook.d/90-none
[main] #4328 exe => /usr/lib/gvfs/gvfs-goa-volume-monitor
[main] #4328 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4328 running /etc/needrestart/hook.d/10-dpkg
[main] #4328 package: gvfs-backends
[main] #4328 running /etc/needrestart/hook.d/20-rpm
[main] #4328 running /etc/needrestart/hook.d/90-none
[main] #4332 exe => /usr/lib/gvfs/gvfs-gphoto2-volume-monitor
[main] #4332 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4332 running /etc/needrestart/hook.d/10-dpkg
[main] #4332 package: gvfs-backends
[main] #4332 running /etc/needrestart/hook.d/20-rpm
[main] #4332 running /etc/needrestart/hook.d/90-none
[main] #4336 exe => /usr/lib/gvfs/gvfs-afc-volume-monitor
[main] #4336 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4336 running /etc/needrestart/hook.d/10-dpkg
[main] #4336 package: gvfs-backends
[main] #4336 running /etc/needrestart/hook.d/20-rpm
[main] #4336 running /etc/needrestart/hook.d/90-none
[main] #4341 exe => /usr/lib/gvfs/gvfs-mtp-volume-monitor
[main] #4341 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4341 running /etc/needrestart/hook.d/10-dpkg
[main] #4341 package: gvfs-backends
[main] #4341 running /etc/needrestart/hook.d/20-rpm
[main] #4341 running /etc/needrestart/hook.d/90-none
[main] #4344 exe => /usr/bin/python2.7
[Core] #4344 is a NeedRestart::Interp::Python
[Core] #4344 source is /usr/bin/cinnamon-launcher
[main] #4344 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4344 running /etc/needrestart/hook.d/10-dpkg
[main] #4344 package: cinnamon
[main] #4344 running /etc/needrestart/hook.d/20-rpm
[main] #4344 running /etc/needrestart/hook.d/90-none
[main] #4348 exe => /usr/lib/x86_64-linux-gnu/cinnamon-settings-daemon/csd-printer
[main] #4348 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4348 running /etc/needrestart/hook.d/10-dpkg
[main] #4348 package: cinnamon-settings-daemon
[main] #4348 running /etc/needrestart/hook.d/20-rpm
[main] #4348 running /etc/needrestart/hook.d/90-none
[main] #4361 exe => /bin/bash
[main] #4361 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4361 running /etc/needrestart/hook.d/10-dpkg
[main] #4361 package: bash
[main] #4361 running /etc/needrestart/hook.d/20-rpm
[main] #4361 running /etc/needrestart/hook.d/90-none
[main] #4374 exe => /usr/lib/dconf/dconf-service
[main] #4374 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4374 running /etc/needrestart/hook.d/10-dpkg
[main] #4374 package: dconf-service
[main] #4374 running /etc/needrestart/hook.d/20-rpm
[main] #4374 running /etc/needrestart/hook.d/90-none
[main] #4383 exe => /usr/lib/x86_64-linux-gnu/gconf/gconfd-2
[main] #4383 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4383 running /etc/needrestart/hook.d/10-dpkg
[main] #4383 package: gconf-service
[main] #4383 running /etc/needrestart/hook.d/20-rpm
[main] #4383 running /etc/needrestart/hook.d/90-none
[main] #4390 exe => /usr/lib/evolution/evolution-source-registry
[main] #4390 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4390 running /etc/needrestart/hook.d/10-dpkg
[main] #4390 package: evolution-data-server
[main] #4390 running /etc/needrestart/hook.d/20-rpm
[main] #4390 running /etc/needrestart/hook.d/90-none
[main] #4406 exe => /usr/lib/evolution/evolution-calendar-factory
[main] #4406 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4406 running /etc/needrestart/hook.d/10-dpkg
[main] #4406 package: evolution-data-server
[main] #4406 running /etc/needrestart/hook.d/20-rpm
[main] #4406 running /etc/needrestart/hook.d/90-none
[main] #4622 exe => /usr/bin/evolution
[main] #4622 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4622 running /etc/needrestart/hook.d/10-dpkg
[main] #4622 package: evolution
[main] #4622 running /etc/needrestart/hook.d/20-rpm
[main] #4622 running /etc/needrestart/hook.d/90-none
[main] #4818 exe => /usr/lib/evolution/evolution-addressbook-factory
[main] #4818 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4818 running /etc/needrestart/hook.d/10-dpkg
[main] #4818 package: evolution-data-server
[main] #4818 running /etc/needrestart/hook.d/20-rpm
[main] #4818 running /etc/needrestart/hook.d/90-none
[main] #4961 exe => /usr/lib/gvfs/gvfsd-trash
[main] #4961 unexpected cgroup '/user.slice/user-1000.slice/session-2.scope'
[main] #4961 running /etc/needrestart/hook.d/10-dpkg
[main] #4961 package: gvfs-daemons
[main] #4961 running /etc/needrestart/hook.d/20-rpm
[main] #4961 running /etc/needrestart/hook.d/90-none
[Kernel] Linux: kernel release 3.16.0-4-amd64, kernel version #1 SMP Debian 3.16.7-2 (2014-11-06)
Failed to load NeedRestart::Kernel::kFreeBSD: [Kernel/kFreeBSD] Not running on GNU/kFreeBSD!
[Kernel/Linux] /boot/vmlinuz-3.16.0-4-amd64 => 3.16.0-4-amd64 (debian-kernel at lists.debian.org) #1 SMP Debian 3.16.7-2 (2014-11-06) [3.16.0-4-amd64]*
[Kernel/Linux] Expected kernel version: 3.16.0-4-amd64
Running kernel seems to be up-to-date.
Services to be restarted:
Restart NetworkManager.service? [yNas]
Restart dbus.service? [yNas]
Restart gdm.service? [yNas]
Restart gdm3? [yNas]
Restart libvirtd.service? [yNas]
Restart ssh? [yNas] y
As you can see, it shows me an enty "ssh" (which would be restarted
given the default is unfortunately to restart stuff).
Afterwards I have:
$ ps ax | grep ssh
2927 pts/4 S+ 0:00 ssh kronecker
2939 ? Ss 0:00 ssh: /home/calestyo/.ssh/control-mux/heisenberg_root at kronecker.scientia.net:22 [mux]
3026 pts/3 S+ 0:00 ssh klenze
4257 ? Ss 0:00 /usr/bin/ssh-agent /usr/bin/dbus-launch --exit-with-session cinnamon-session-cinnamon
17500 ? Ss 0:00 /usr/sbin/sshd -D
17502 pts/5 S+ 0:00 grep --color=auto ssh
=> suddently sshd runs (which is disabled in both, sysvinit and systemd configurations)
Since this may start services which are only to be run under specific
situations, e.g. when only in a secure network, or when VPN is running
because they may grant system access e.g. without authentication...
(take ssh which can be configured to allow password less access to root)
I'm marking this severity=critical and tags=security.
Maybe the whole things applies to non-SSH as well, since a while I'm always
seeing two entries for GDM, one gdm3.service and gdm3 alone.
Cheers,
Chris.
-- Package-specific info:
needrestart output:
Running kernel seems to be up-to-date.
Services to be restarted:
service dbus restart
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_DE.utf8, LC_CTYPE=en_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages needrestart depends on:
ii dpkg 1.17.22
ii libmodule-find-perl 0.12-1
ii libmodule-scandeps-perl 1.16-1
ii libproc-processtable-perl 0.51-1
ii libsort-naturally-perl 1.03-1
ii libterm-readkey-perl 2.32-1+b1
ii perl 5.20.1-3
needrestart recommends no packages.
needrestart suggests no packages.
-- Configuration Files:
/etc/needrestart/needrestart.conf changed:
$nrconf{defno} = 1;
$nrconf{blacklist} = [
# ignore sudo (not a daemon)
q(^/usr/bin/sudo(\.dpkg-new)?$),
# ignore DHCP clients
q(^/sbin/(dhclient|dhcpcd5|pump|udhcpc)(\.dpkg-new)?$),
];
$nrconf{override_rc} = {
# DBus
q(^dbus) => 0,
# display managers
q(^gdm) => 0,
q(^kdm) => 0,
q(^nodm) => 0,
q(^wdm) => 0,
q(^xdm) => 0,
q(^lightdm) => 0,
# networking stuff
q(^network-manager) => 0,
q(^NetworkManager) => 0,
q(^openvpn) => 0,
q(^quagga) => 0,
q(^tinc) => 0,
# gettys
q(^getty at .+\.service) => 0,
# misc
q(^zfs-fuse) => 0,
q(^mythtv-backend) => 0,
};
if(-d q(/etc/needrestart/conf.d)) {
foreach my $fn (sort </etc/needrestart/conf.d/*.conf>) {
print STDERR "$LOGPREF eval $fn\n" if($nrconf{verbose});
eval do { local(@ARGV, $/) = $fn; <>};
die "Error parsing $fn: $@" if($@);
}
}
-- no debconf information
More information about the Secure-testing-team
mailing list