libvirt-bin: CVE-2013-6456: virsh shutdown does not handle symlinks correctly for LXC

Related Vulnerabilities: CVE-2013-6456  

Debian Bug report logs - #732394
libvirt-bin: CVE-2013-6456: virsh shutdown does not handle symlinks correctly for LXC

version graph

Reported by: Reco <recoverym4n@gmail.com>

Date: Tue, 17 Dec 2013 15:42:11 UTC

Severity: important

Tags: security

Found in versions libvirt/1.0.1~rc1-1, libvirt/1.1.4-2~bpo70+1

Fixed in version libvirt/1.2.3-1

Done: Guido Günther <agx@sigxcpu.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>:
Bug#732394; Package libvirt-bin. (Tue, 17 Dec 2013 15:42:15 GMT) (full text, mbox, link).


Acknowledgement sent to Reco <recoverym4n@gmail.com>:
New Bug report received and forwarded. Copy sent to Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>. (Tue, 17 Dec 2013 15:42:15 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reco <recoverym4n@gmail.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: libvirt-bin: virsh shutdown does not handle symlinks correctly for LXC
Date: Tue, 17 Dec 2013 19:41:30 +0400
Package: libvirt-bin
Version: 1.1.4-2~bpo70+1
Severity: important

Dear Maintainer,

As of versions 1.1.4 (current backported one) and 1.2.0 (current
experimental one) libvirt's implementation for LXC containers lacks
basic sanity checks in container shutdown implementation.

One can trace the problem to virInitctlSetRunLevel function at
src/util/virinitctl.c file.

Once user invokes 'virsh -c lxc:// shutdown', libvirtd constructs a
pathname to '/dev/initctl' inside the container, such as:

/proc/<container_init_pid>/root//dev/initctl

opens it without any additional checking and writes runlevel change
request to the init. It does not check whenever constructed pathname is
an actual pipe, which is bad. It does not check who exactly is on the
other side of this pipe, which is much worse.

Apparently this code was tested against systemd, which
creates /dev/initctl pipe and listens on it.

But, both upstart and sysvinit do not create such pipe (current wheezy's
init is using /run/initctl), which leads to this problem.


To reproduce the problem, one will need:

1) One Debian GNU/Linux installation, configured to run LXC (cgroups and
stuff), using sysvinit or upstart as PID 1.

2) One Debian GNU/Linux container, running sysvinit or upstart.

3) Boot the container.

4) Invoke inside the container:

ln -s /run/initctl /dev/initctl

5) Invoke from outside the container:

virsh -c lxc:// shutdown <container>

6) Observe the host shutting down.

-- System Information:
Debian Release: 7.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.11-0.bpo.2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libvirt-bin depends on:
ii  adduser              3.113+nmu3
ii  gettext-base         0.18.1.1-9
ii  init-system-helpers  1.11~bpo70.1
ii  libaudit0            1:1.7.18-1.1
ii  libavahi-client3     0.6.31-2
ii  libavahi-common3     0.6.31-2
ii  libblkid1            2.20.1-5.3
ii  libc6                2.13-38
ii  libcap-ng0           0.6.6-2
ii  libdbus-1-3          1.6.8-1+deb7u1
ii  libdevmapper1.02.1   2:1.02.74-8
ii  libfuse2             2.9.0-2+deb7u1
ii  libgcrypt11          1.5.0-5+deb7u1
ii  libgnutls26          2.12.20-7
ii  libnetcf1            0.1.9-2
ii  libnl1               1.1-7
ii  libnuma1             2.0.8~rc4-1
ii  libparted0debian1    2.3-12
ii  libpcap0.8           1.3.0-1
ii  libpciaccess0        0.13.1-2
ii  libreadline6         6.2+dfsg-0.1
ii  libsasl2-2           2.1.25.dfsg1-6+deb7u1
ii  libssh4-1            1.4.2-1.1
ii  libudev0             175-7.2
ii  libvirt0             1.1.4-2~bpo70+1
ii  libxenstore3.0       4.1.4-3+deb7u1
ii  libxml2              2.8.0+dfsg1-7+nmu2
ii  libyajl2             2.0.4-2
ii  logrotate            3.8.1-4

Versions of packages libvirt-bin recommends:
ii  bridge-utils     1.5-6
ii  dmidecode        2.11-9
ii  dnsmasq-base     2.62-3+deb7u1
pn  ebtables         <none>
ii  iproute          20120521-3+b3
ii  iptables         1.4.14-3.1
ii  libxml2-utils    2.8.0+dfsg1-7+nmu2
ii  netcat-openbsd   1.105-7
ii  parted           2.3-12
ii  pm-utils         1.4.1-9
pn  qemu-kvm | qemu  <none>

Versions of packages libvirt-bin suggests:
pn  auditd       <none>
pn  policykit-1  <none>
pn  radvd        <none>
pn  systemtap    <none>

-- Configuration Files:
<omitted>

-- no debconf information



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>:
Bug#732394; Package libvirt-bin. (Tue, 17 Dec 2013 20:30:07 GMT) (full text, mbox, link).


Acknowledgement sent to Guido Günther <gg@godiug.net>:
Extra info received and forwarded to list. Copy sent to Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>. (Tue, 17 Dec 2013 20:30:08 GMT) (full text, mbox, link).


Message #10 received at 732394@bugs.debian.org (full text, mbox, reply):

From: Guido Günther <gg@godiug.net>
To: Reco <recoverym4n@gmail.com>, 732394@bugs.debian.org
Subject: Re: [Pkg-libvirt-maintainers] Bug#732394: libvirt-bin: virsh shutdown does not handle symlinks correctly for LXC
Date: Tue, 17 Dec 2013 21:27:36 +0100
Hi Reco,
On Tue, Dec 17, 2013 at 07:41:30PM +0400, Reco wrote:
[..snip..] 
> Apparently this code was tested against systemd, which
> creates /dev/initctl pipe and listens on it.
I won't get around to check myself anytime soonish so reporting this
upstream to  libvir-list@redhat.com would be much appreciated.
Cheers,
 -- Guido



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>:
Bug#732394; Package libvirt-bin. (Wed, 18 Dec 2013 14:36:04 GMT) (full text, mbox, link).


Acknowledgement sent to Reco <recoverym4n@gmail.com>:
Extra info received and forwarded to list. Copy sent to Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>. (Wed, 18 Dec 2013 14:36:04 GMT) (full text, mbox, link).


Message #15 received at 732394@bugs.debian.org (full text, mbox, reply):

From: Reco <recoverym4n@gmail.com>
To: libvir-list@redhat.com
Cc: 732394@bugs.debian.org
Subject: Implementation deficiency in virInitctlSetRunLevel
Date: Wed, 18 Dec 2013 18:33:21 +0400
[Message part 1 (text/plain, inline)]
 Hello, list.

I was pointed here by maintainer of libvirt package in Debian, Guido
Günther. For the sake of completeness, the original bug report can be
viewed at this link:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732394

To sum up the bug report, current implementation of
virInitctlSetRunLevel function (src/util/virinitctl.c) lacks any sanity
checks before writing to container's /dev/initctl. In the absence of
such checks, libvirtd can be easily tricked to write runlevel check
request to an arbitrary main hosts' file (including
hosts' /run/initctl, as described in the bug report). All it takes is
one symlink in place of containers' /dev/initctl.

I've checked current libvirtd's git, and it seems to me that the
problem is still here.

Attached to this letter is a patch which tries to mitigate the issue by
checking whenever container's /dev/initctl is a pipe actually.

Sincerely yours, Reco

PS I'm not subscribed to this list, in case of further questions please
CC me.
[Don-t-write-to-non-pipes.patch (text/x-diff, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>:
Bug#732394; Package libvirt-bin. (Wed, 18 Dec 2013 17:18:07 GMT) (full text, mbox, link).


Acknowledgement sent to Michal Privoznik <mprivozn@redhat.com>:
Extra info received and forwarded to list. Copy sent to Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>. (Wed, 18 Dec 2013 17:18:07 GMT) (full text, mbox, link).


Message #20 received at 732394@bugs.debian.org (full text, mbox, reply):

From: Michal Privoznik <mprivozn@redhat.com>
To: Reco <recoverym4n@gmail.com>, libvir-list@redhat.com
Cc: 732394@bugs.debian.org
Subject: Re: [libvirt] Implementation deficiency in virInitctlSetRunLevel
Date: Wed, 18 Dec 2013 18:15:17 +0100
On 18.12.2013 15:33, Reco wrote:
>  Hello, list.
> 
> I was pointed here by maintainer of libvirt package in Debian, Guido
> Günther. For the sake of completeness, the original bug report can be
> viewed at this link:
> 
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732394
> 
> To sum up the bug report, current implementation of
> virInitctlSetRunLevel function (src/util/virinitctl.c) lacks any sanity
> checks before writing to container's /dev/initctl. In the absence of
> such checks, libvirtd can be easily tricked to write runlevel check
> request to an arbitrary main hosts' file (including
> hosts' /run/initctl, as described in the bug report). All it takes is
> one symlink in place of containers' /dev/initctl.
> 
> I've checked current libvirtd's git, and it seems to me that the
> problem is still here.
> 
> Attached to this letter is a patch which tries to mitigate the issue by
> checking whenever container's /dev/initctl is a pipe actually.
> 
> Sincerely yours, Reco
> 
> PS I'm not subscribed to this list, in case of further questions please
> CC me.
> 
> 
> 
> --
> libvir-list mailing list
> libvir-list@redhat.com
> https://www.redhat.com/mailman/listinfo/libvir-list
> 

[Pasting the patch here]

> --- a/src/util/virinitctl.c 2013-12-18 11:13:10.078432196 +0400
> +++ b/src/util/virinitctl.c 2013-12-18 11:26:50.000000000 +0400
> @@ -24,7 +24,10 @@
>  #include <config.h>
> 
>  #include <sys/param.h>
> +#include <sys/types.h>
> +#include <sys/stat.h>
>  #include <fcntl.h>
> +#include <unistd.h>
> 
>  #include "internal.h"
>  #include "virinitctl.h"
> @@ -122,6 +125,7 @@
>      int fd = -1;
>      char *path = NULL;
>      int ret = -1;
> +    struct stat attrs;
> 
>      memset(&req, 0, sizeof(req));
> 
> @@ -139,7 +143,10 @@
>              return -1;
>      }
> 
> -    if ((fd = open(path, O_WRONLY|O_NONBLOCK|O_CLOEXEC|O_NOCTTY)) < 0) {
> +    if (lstat(path, &attrs) == -1)
> +        goto cleanup;

While the part above looks okay, I think we should report error if the /dev/initctl is not a pipe. Moreover, with your approach, if it's really not a pipe, we don't call open() and proceed to safewrite(-1, ...) at line 153 which will report EBADF error.

> +
> +    if ((attrs.st_mode & S_IFIFO) && (fd = open(path, O_WRONLY|O_NONBLOCK|O_CLOEXEC|O_NOCTTY)) < 0) {
>          if (errno == ENOENT) {
>              ret = 0;
>              goto cleanup

Missing ';' at EOL ^^^ - I guess you missed that during copy-paste.

Looking forward to v2.
BTW: consider using git when sending patches. I couldn't really apply this patch via 'git am'.

http://libvirt.org/hacking.html#patches

Michal



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>:
Bug#732394; Package libvirt-bin. (Wed, 18 Dec 2013 17:27:10 GMT) (full text, mbox, link).


Acknowledgement sent to "Daniel P. Berrange" <berrange@redhat.com>:
Extra info received and forwarded to list. Copy sent to Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>. (Wed, 18 Dec 2013 17:27:10 GMT) (full text, mbox, link).


Message #25 received at 732394@bugs.debian.org (full text, mbox, reply):

From: "Daniel P. Berrange" <berrange@redhat.com>
To: Reco <recoverym4n@gmail.com>
Cc: libvir-list@redhat.com, 732394@bugs.debian.org
Subject: Re: [libvirt] Implementation deficiency in virInitctlSetRunLevel
Date: Wed, 18 Dec 2013 17:25:46 +0000
On Wed, Dec 18, 2013 at 06:33:21PM +0400, Reco wrote:
>  Hello, list.
> 
> I was pointed here by maintainer of libvirt package in Debian, Guido
> Günther. For the sake of completeness, the original bug report can be
> viewed at this link:
> 
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732394
> 
> To sum up the bug report, current implementation of
> virInitctlSetRunLevel function (src/util/virinitctl.c) lacks any sanity
> checks before writing to container's /dev/initctl. In the absence of
> such checks, libvirtd can be easily tricked to write runlevel check
> request to an arbitrary main hosts' file (including
> hosts' /run/initctl, as described in the bug report). All it takes is
> one symlink in place of containers' /dev/initctl.
> 
> I've checked current libvirtd's git, and it seems to me that the
> problem is still here.
> 
> Attached to this letter is a patch which tries to mitigate the issue by
> checking whenever container's /dev/initctl is a pipe actually.
> 
> Sincerely yours, Reco
> 
> PS I'm not subscribed to this list, in case of further questions please
> CC me.

> --- a/src/util/virinitctl.c 2013-12-18 11:13:10.078432196 +0400
> +++ b/src/util/virinitctl.c 2013-12-18 11:26:50.000000000 +0400
> @@ -24,7 +24,10 @@
>  #include <config.h>
> 
>  #include <sys/param.h>
> +#include <sys/types.h>
> +#include <sys/stat.h>
>  #include <fcntl.h>
> +#include <unistd.h>
> 
>  #include "internal.h"
>  #include "virinitctl.h"
> @@ -122,6 +125,7 @@
>      int fd = -1;
>      char *path = NULL;
>      int ret = -1;
> +    struct stat attrs;
> 
>      memset(&req, 0, sizeof(req));
> 
> @@ -139,7 +143,10 @@
>              return -1;
>      }
> 
> -    if ((fd = open(path, O_WRONLY|O_NONBLOCK|O_CLOEXEC|O_NOCTTY)) < 0) {
> +    if (lstat(path, &attrs) == -1)
> +        goto cleanup;
> +
> +    if ((attrs.st_mode & S_IFIFO) && (fd = open(path, O_WRONLY|O_NONBLOCK|O_CLOEXEC|O_NOCTTY)) < 0) {
>          if (errno == ENOENT) {
>              ret = 0;
>              goto cleanup

Hmm, using lstat sets up a race condition though. I would suggest we
use O_NOFOLLOW with open() but that only works for the final component
of the path - so if /dev is a symlink in the guest it'll still cause
problems.

There are also a few other places where we use /proc/$PID/root/dev for
hotplug where we mknod. If the guest setup a bad /dev symlink it could
cause us problems. 

I think we may actually have to instead rely on forking a child which
does setns(/proc/$PID/ns/mnt) to make the changes safely in the container
namespace.

Regards,
Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|



Added tag(s) security. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Sat, 28 Dec 2013 05:54:04 GMT) (full text, mbox, link).


Changed Bug title to 'libvirt-bin: CVE-2013-6456: virsh shutdown does not handle symlinks correctly for LXC' from 'libvirt-bin: virsh shutdown does not handle symlinks correctly for LXC' Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 03 Jan 2014 05:21:14 GMT) (full text, mbox, link).


Marked as found in versions libvirt/1.0.1~rc1-1. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 03 Jan 2014 12:09:08 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>:
Bug#732394; Package libvirt-bin. (Thu, 09 Jan 2014 08:39:13 GMT) (full text, mbox, link).


Acknowledgement sent to Guido Günther <agx@sigxcpu.org>:
Extra info received and forwarded to list. Copy sent to Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>. (Thu, 09 Jan 2014 08:39:13 GMT) (full text, mbox, link).


Message #36 received at 732394@bugs.debian.org (full text, mbox, reply):

From: Guido Günther <agx@sigxcpu.org>
To: 732394@bugs.debian.org
Subject: Affected versions
Date: Thu, 9 Jan 2014 09:28:26 +0100
Just for completeness (the affected versions and
https://security-tracker.debian.org/tracker/CVE-2013-6456 indicate this
already):

squeeze and wheezy are not affected.
Cheers,
 -- Guido



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>:
Bug#732394; Package libvirt-bin. (Wed, 19 Feb 2014 12:15:04 GMT) (full text, mbox, link).


Acknowledgement sent to Reco <recoverym4n@gmail.com>:
Extra info received and forwarded to list. Copy sent to Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>. (Wed, 19 Feb 2014 12:15:04 GMT) (full text, mbox, link).


Message #41 received at 732394@bugs.debian.org (full text, mbox, reply):

From: Reco <recoverym4n@gmail.com>
To: Guido Günther <gg@godiug.net>
Cc: 732394@bugs.debian.org
Subject: Re: [Pkg-libvirt-maintainers] Bug#732394: libvirt-bin: virsh shutdown does not handle symlinks correctly for LXC
Date: Wed, 19 Feb 2014 16:10:59 +0400
 Hi.

Today the problem was fixed in this upstream commit:

http://libvirt.org/git/?p=libvirt.git;a=commit;h=5fc590ad9f4

Please consider uploading fixed version of libvirt and friends.
An upload to backports would be appreciated too.

Reco



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>:
Bug#732394; Package libvirt-bin. (Wed, 19 Feb 2014 12:18:04 GMT) (full text, mbox, link).


Acknowledgement sent to "Daniel P. Berrange" <berrange@redhat.com>:
Extra info received and forwarded to list. Copy sent to Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>. (Wed, 19 Feb 2014 12:18:04 GMT) (full text, mbox, link).


Message #46 received at 732394@bugs.debian.org (full text, mbox, reply):

From: "Daniel P. Berrange" <berrange@redhat.com>
To: 732394@bugs.debian.org
Subject: Re: [libvirt] Implementation deficiency in virInitctlSetRunLevel
Date: Wed, 19 Feb 2014 12:14:09 +0000
The fix for this issue is now available in libvirt repositories. See
this security notice for further information on the changesets that
need to be backported

  http://security.libvirt.org/2013/0018.html

Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|



Reply sent to Guido Günther <agx@sigxcpu.org>:
You have taken responsibility. (Mon, 07 Apr 2014 12:06:08 GMT) (full text, mbox, link).


Notification sent to Reco <recoverym4n@gmail.com>:
Bug acknowledged by developer. (Mon, 07 Apr 2014 12:06:08 GMT) (full text, mbox, link).


Message #51 received at 732394-close@bugs.debian.org (full text, mbox, reply):

From: Guido Günther <agx@sigxcpu.org>
To: 732394-close@bugs.debian.org
Subject: Bug#732394: fixed in libvirt 1.2.3-1
Date: Mon, 07 Apr 2014 12:04:12 +0000
Source: libvirt
Source-Version: 1.2.3-1

We believe that the bug you reported is fixed in the latest version of
libvirt, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 732394@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Guido Günther <agx@sigxcpu.org> (supplier of updated libvirt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 07 Apr 2014 12:15:02 +0200
Source: libvirt
Binary: libvirt-bin libvirt0 libvirt0-dbg libvirt-doc libvirt-dev libvirt-sanlock
Architecture: source amd64 all
Version: 1.2.3-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>
Changed-By: Guido Günther <agx@sigxcpu.org>
Description: 
 libvirt-bin - programs for the libvirt library
 libvirt-dev - development files for the libvirt library
 libvirt-doc - documentation for the libvirt library
 libvirt-sanlock - library for interfacing with different virtualization systems
 libvirt0   - library for interfacing with different virtualization systems
 libvirt0-dbg - library for interfacing with different virtualization systems
Closes: 732394 739082 739096 741276
Changes: 
 libvirt (1.2.3-1) experimental; urgency=medium
 .
   * [aa5cd19] /etc/init.d/libvirt-guests: source /lib/lsb/init-function.
     This make sure we redirect calls to systemctl correctly
     Thanks to Laurent Bigonville (Closes: #739082)
   * [9be0bf9] Remove old restart handling code from postinst.
     This brings the dh_installinit calls in line with the dh_systemd_start
     calls.
     Thanks to Laurent Bigonville (Closes: #739096)
   * [9c408f9] New upstream version 1.2.2. Fixes CVE-2013-6456
     (Closes: #741276, #732394)
   * [e2f0077] Bump symbols versions
   * [c7bf776] Update patches.
     Dropped
       xen-fix-parsing-xend-http-response.patch - applied upstream
   * [cca8c1e] New upstream version 1.2.3
   * [11ad777] New patch Skip-vircgrouptest.patch.
     Skip vircgrouptest since the sys emulating code isn't complete and fails
     in our /sys free chroot.
   * [448ab8c] Build-depend on libsystemd-daemon-dev on linux
   * [66f2a93] Refresh patches
   * [3038786] Fix test failures
   * [bbed2fd] Depend on libattr1-dev for selinux tests
   * [659fc63] Bump symbol versions
   * [618b64f] Adjust systemd installation to upstream changes
   * [1850e36] Bump standards version
   * [e934847] libvirt-guests: avoid bashism
Checksums-Sha1: 
 d4e9ba070e7556bd63e8db575760b3f21da1adf8 2618 libvirt_1.2.3-1.dsc
 36763621a430674312fdd08a9c367517e9a2e82e 28605530 libvirt_1.2.3.orig.tar.gz
 128ce0cb4ffcc0d1abb73c4431439b23db823b33 39928 libvirt_1.2.3-1.debian.tar.xz
 dbf2d86052d5016a1f7b39c3713c8751530a1eb2 3912998 libvirt-bin_1.2.3-1_amd64.deb
 82ce42889d670d28f471e469bfc2cc312698b939 2690842 libvirt0_1.2.3-1_amd64.deb
 2e5e11fadf5b989b4c0e4a4a287f5d76f796da9b 8677602 libvirt0-dbg_1.2.3-1_amd64.deb
 8df28eefa7c8fa48d63c6cca19f3b866dc668a05 2903698 libvirt-doc_1.2.3-1_all.deb
 add7772c03c83c17c8177fec1e1c64bdbac06df5 1930636 libvirt-dev_1.2.3-1_amd64.deb
 46e4ce740f456797ebac5d923ce049bbf6131fd7 1862518 libvirt-sanlock_1.2.3-1_amd64.deb
Checksums-Sha256: 
 70ac0bffe12ecb7c53de97168b00a14473e731b2f80414c27266d08f6e3c024e 2618 libvirt_1.2.3-1.dsc
 b489d1a29c6166643d34b72795a89b03c6ac775cdaeadb6aa86fc1a982c02e31 28605530 libvirt_1.2.3.orig.tar.gz
 be3a2ea7264a6966095aa80cbf2eb1d065f0983bdffb200cca9f63a0aff0662e 39928 libvirt_1.2.3-1.debian.tar.xz
 d373b663fdff793ee858993e9625f141cc1fd0f452f61f5aa65ca60de6de5094 3912998 libvirt-bin_1.2.3-1_amd64.deb
 6d45c4f35a433e191a11733a4aed19d8f3cc5fa31f0c7e2f1442715598fbe0f0 2690842 libvirt0_1.2.3-1_amd64.deb
 718eaabf6dd2cbd2d1df8ccafefb98bd002d79ca4ddc6363fc561f3c44544fb2 8677602 libvirt0-dbg_1.2.3-1_amd64.deb
 d1aa9234102b2674e6cd7d699334f7238976c176ab908017b5e543fd1f6959ab 2903698 libvirt-doc_1.2.3-1_all.deb
 dd83dfa2c0aadb152fa0ad7d3e98025f66560abcd4a859781e78b1692c5fd2fc 1930636 libvirt-dev_1.2.3-1_amd64.deb
 2d8c395db277289239230bf7429ac053b54668dcf6a693356b93d9e2f273ece2 1862518 libvirt-sanlock_1.2.3-1_amd64.deb
Files: 
 ccc64cd9827d240308854614f2ba042e 2618 libs optional libvirt_1.2.3-1.dsc
 ad1602a2fcc3609c83b885a28f3eecbd 28605530 libs optional libvirt_1.2.3.orig.tar.gz
 4cd663441955f0603a518804f25b9319 39928 libs optional libvirt_1.2.3-1.debian.tar.xz
 f370c4f18fac71ef7d1e35753f9d10e6 3912998 admin optional libvirt-bin_1.2.3-1_amd64.deb
 d0fd98cd5e9b8ccaf7a3d20ac8c2c4a0 2690842 libs optional libvirt0_1.2.3-1_amd64.deb
 0bfee3ee259b561c4a2668ae597c9770 8677602 debug extra libvirt0-dbg_1.2.3-1_amd64.deb
 62ebf7a21ba2ba2ff427835204d33f09 2903698 doc optional libvirt-doc_1.2.3-1_all.deb
 66c7e525476be8d3c497747b917da1f0 1930636 libdevel optional libvirt-dev_1.2.3-1_amd64.deb
 68ece5437ad863d928a4d9ede0629218 1862518 libs extra libvirt-sanlock_1.2.3-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iD8DBQFTQn7dn88szT8+ZCYRAhZeAJ40PJVtcicI0WXDQ9GadsM6BpHnaACffmg2
s5Yew3d20iIWBIDbAWVqMbY=
=4FO1
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 27 Jul 2015 07:50:18 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 17:22:48 2019; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.