Bug 1888031
| Summary: | Permissions too restrictive on /var/run/opendmarc | ||
|---|---|---|---|
| Product: | [Fedora] Fedora EPEL | Reporter: | Graham Leggett <minfrin> |
| Component: | opendmarc | Assignee: | Kevin Fenzi <kevin> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | epel8 | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | opendmarc-1.4.0-1.fc34 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-05-08 01:33:45 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Graham Leggett
2020-10-13 20:23:27 UTC
Just hit this again, we have a DoS on every update. Any news? Hit this again, any news? PRs submitted to fix this; https://src.fedoraproject.org/rpms/opendmarc/pull-request/7 https://src.fedoraproject.org/rpms/opendmarc/pull-request/6 https://src.fedoraproject.org/rpms/opendmarc/pull-request/5 https://src.fedoraproject.org/rpms/opendmarc/pull-request/4 https://src.fedoraproject.org/rpms/opendmarc/pull-request/3 https://src.fedoraproject.org/rpms/opendmarc/pull-request/2 Hi Graham, unfortunately i do not have time to maintain Opendmarc. The package is now orphaned. If you are a maintainer then please consider taking it. Apologies. This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component. I am not a maintainer but am happy to become one - are you in a position to hold my hand through the process or pass me on to someone who is? Hey Graham. I just took this package because I use it... I'd be very happy to have someone else work on it. :) Can you look at doing a pull request for it for rawhide? (You will need to use https to push/pull your fork on src.fedoraproject.org until you are a packager, see https://fedoraproject.org/wiki/Infrastructure/HTTPS-commits ) There's a number of issues outstanding. This issue, the version to fix some cve's, etc. Feel free to drop me email or ask me here if you have any questions on process, etc. If we can get things working well in rawhide, I can add you to packagers and you can update the other branches? Sound reasonable? This specific PR is the rawhide patch: https://src.fedoraproject.org/rpms/opendmarc/pull-request/2 Am I understanding correctly that we apply to rawhide first, and if people are happy, backport as appropriate? So, I ended up changing a bunch of things in the packaging here and moving to 1.4.0 upstream (they are becoming more active again on gihutb now). Can I get folks to test? rawhide/f35: http://koji.fedoraproject.org/koji/taskinfo?taskID=66668437 f34: http://koji.fedoraproject.org/koji/taskinfo?taskID=66668626 f33: http://koji.fedoraproject.org/koji/taskinfo?taskID=66668868 f32: http://koji.fedoraproject.org/koji/taskinfo?taskID=66668906 epel8: http://koji.fedoraproject.org/koji/taskinfo?taskID=66668617 epel7: http://koji.fedoraproject.org/koji/taskinfo?taskID=66669466 I'll probibly push this to rawhide later today and see about pushing other releases based on feedback. Graham: I am going to close your PR's... I took that into the changes I made, so I'll close the ones on the interface. Many thanks tho... If you are still interested in co-maintaining happy to arrange that... these 1.4.0 changes were kind of difficult. Perhaps upstream will be better moving forward now that they are moving to github, etc. FEDORA-2021-c1b846164e has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2021-c1b846164e FEDORA-2021-c1b846164e has been pushed to the Fedora 34 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-c1b846164e` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-c1b846164e See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2021-c1b846164e has been pushed to the Fedora 34 stable repository. If problem still persists, please make note of it in this bug report. |