sts-sponsors team mailing list archive
-
sts-sponsors team
-
Mailing list archive
-
Message #02424
Re: Please review and sponsor LP#1912122 for rsyslog
Hi Mauricio,
The security team have acked the bug, see the email, and the comment in the bug.
I uploaded new debdiffs with the extra step Steve suggested, I built
it and tested it,
and it works great.
Please sponsor.
Thanks,
Matthew
On Tue, Jan 19, 2021 at 2:54 AM Mauricio Oliveira
<mauricio.oliveira@xxxxxxxxxxxxx> wrote:
>
> Hey Matthew,
>
> This seems straightforward and the 'right thing to do', and maybe even
> Groovy isn't an issue since the kernel config option is already there.
>
> However, we probably need a review/ack from the security team on it,
> since it's more on their court than ours.
>
> Could you please subscribe the security team to the bug, and ask for
> their review/ack in a new comment?
> I've seen good responsiveness from them in a case like this in the
> past; but if they don't you may also ping them in their channel.
>
> Thanks,
> Mauricio
>
> On Mon, Jan 18, 2021 at 12:32 AM Matthew Ruffell
> <matthew.ruffell@xxxxxxxxxxxxx> wrote:
> >
> > Hi Eric, Mauricio,
> >
> > Could you please review and consider sponsoring the rsyslog debdiffs on LP
> > 1912122?
> >
> > https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1912122
> >
> > VISA opened a case and mentioned that /var/log/dmesg is 0644, and I should have
> > really caught this and changed it to 0640 during my campaign to get
> > DMESG_RESTRICT enabled.
> >
> > So, fixing it up here.
> >
> > I am aware that this might not be possible to SRU to Groovy, or would get
> > stuck in block-proposed, but its the upload to hirsute that really matters.
> >
> > Please review and sponsor. You can put timecards under:
> > SF301554 - VISA - /var/log/dmesg file pemission
> >
> > Thanks,
> > Matthew
> >
> > --
> > Mailing list: https://launchpad.net/~sts-sponsors
> > Post to : sts-sponsors@xxxxxxxxxxxxxxxxxxx
> > Unsubscribe : https://launchpad.net/~sts-sponsors
> > More help : https://help.launchpad.net/ListHelp
>
>
>
> --
> Mauricio Faria de Oliveira
Follow ups
References