Bug #947041 “urandom startup script initializes poolsize with in...” : Bugs : sysvinit package : Ubuntu

Revision history for this message

Kasper Dupont (ubuntu-launchpad-feb) wrote on 2012-03-05:

#1

Dependencies.txt Edit (1.9 KiB, text/plain; charset="utf-8")

Revision history for this message

Kasper Dupont (ubuntu-launchpad-feb) wrote on 2012-03-05:

#2

I noticed another bug in the same script. The two calls of dd to save the seed during boot and shutdown will truncate the pool before writing new data. This will cause a small time window during which the seed only exists in RAM and not on permanent storage. If the system was to crash or lose power during that time window, all the entropy collected since the system was first installed would be lost. Using conv=notrunc would avoid this problem.

Revision history for this message

Simon Déziel (sdeziel) wrote on 2013-01-24:

#3

John Denker provided many patches for the urandom init script. All of them were integrated in version sysvinit (2.88dsf-23) which is not ship in any Ubuntu version (not even in Raring).

IMHO, this bug should be set to high importance because having a good random seed is important for many cryptographic operations.

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-01-24:

#4

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in sysvinit (Ubuntu):
status:	New → Confirmed

Simon Déziel (sdeziel) on 2013-01-24

Changed in sysvinit (Ubuntu):
status:	Confirmed → Fix Committed

Bug Watch Updater (bug-watch-updater) on 2013-01-24

Changed in sysvinit (Debian):
status:	Unknown → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-05-17:

#5

Download full text (31.3 KiB)

This bug was fixed in the package sysvinit - 2.88dsf-41ubuntu1

---------------
sysvinit (2.88dsf-41ubuntu1) saucy; urgency=low

  * Merge from Debian unstable:
    - fixes typo in /lib/init/vars.sh. LP: #1146047.
  * Remaining changes:
    - Remove various initscripts (and an ifupdown hook) that have been
      replaced by upstart jobs shipped in other packages.
    - debian/sysvinit-utils.links: Compat symlink from /usr/bin/service to
      /usr/sbin/service
    - If /var/run/init.upgraded exists, call telinit u before unmounting
      the root filesystem.
    - Support Cell processor:
      + debian/initscripts.postinst: Create spu system group and /spu mount
        point if we are running on a Cell processor.
      + debian/control: Add initscripts dependency 'passwd' for groupadd.
    - debian/patches/91_sulogin_lockedpw.dpatch: Disable "root account is
      locked" warning, since this is the default in Ubuntu. Document this in
      sulogin.8.
    - debian/patches/92_sulogin_support_static_sh.patch: add support for
      /bin/static-sh as fallback if the regular shell fails to execute
    - debian/control: Drop Essential: yes from packages since we use Upstart.
    - debian/control: Do not build the sysvinit binary package any more. It
      conflicts with upstart, which is required, so it is uninstallable.
    - remove debian/postinst: this is supposed to go into the sysvinit
      package in Debian, but we don't ship that.
    - debian/control: sysvinit-utils recommends the upstart that provides
      the reload action
    - Mark all binary packages as Multi-Arch: foreign to allow for upstart
      to be installable with multi-arch (needed for armhf containers on x86)
    - Add a versioned depends to initscripts of mountall (>= 2.28), since
      everything else depends on initscripts for /run and the boot-time
      implementation is in mountall for us.
    - Drop /etc/default/tmpfs, and drop mention of it from
      debian/src/initscripts/man/rcS.5.
    - Added debian/src/initscripts/etc/init.d/ondemand: Sleep for 60 seconds,
      then set CPU Frequency Scaling governor to "ondemand" (or to
      "interactive" on systems that support it).
    - Remove mention of RAMLOCK, RAMSHM, and RAMTMP from the rcS(5) manual
      page.
    - When /dev/shm and /run/shm are both directories (not mounts), make
      /dev/shm a symlink to /run/shm.
    - d/service/service: Use 'stop/start' instead of passing restart
      directly through to upstart.
    - d/service/service.8: Document handling of upstart jobs.
    - Fix documentation for other things handled by mountall instead of
      initscripts: tmpfs, /sys (mountall lets you specify options in
      /etc/fstab), and ASYNCMOUNTNFS.
    - debian/src/initscripts/etc/init.d/sendsigs:
      + sendsigs: OMITPIDS needs to be reinitalized for every loop iteration
        before concatenating pids of upstart jobs to it.
      + only omit jobs that are in the 'start' goal or that are in state
        'stop/killed'. Those that are destined for 'stop' are waited on and
        killed like all other processes.
      + make report_unkillable use apport instead of echoing to console; but
        disable...

This bug was fixed in the package sysvinit - 2.88dsf-41ubuntu1

---------------
sysvinit (2.88dsf-41ubuntu1) saucy; urgency=low

* Merge from Debian unstable:
    - fixes typo in /lib/init/vars.sh.  LP: #1146047.
  * Remaining changes:
    - Remove various initscripts (and an ifupdown hook) that have been
      replaced by upstart jobs shipped in other packages.
    - debian/sysvinit-utils.links: Compat symlink from /usr/bin/service to
      /usr/sbin/service
    - If /var/run/init.upgraded exists, call telinit u before unmounting
      the root filesystem.
    - Support Cell processor:
      + debian/initscripts.postinst: Create spu system group and /spu mount
        point if we are running on a Cell processor.
      + debian/control: Add initscripts dependency 'passwd' for groupadd.
    - debian/patches/91_sulogin_lockedpw.dpatch: Disable "root account is
      locked" warning, since this is the default in Ubuntu. Document this in
      sulogin.8.
    - debian/patches/92_sulogin_support_static_sh.patch: add support for
      /bin/static-sh as fallback if the regular shell fails to execute
    - debian/control: Drop Essential: yes from packages since we use Upstart.
    - debian/control: Do not build the sysvinit binary package any more. It
      conflicts with upstart, which is required, so it is uninstallable.
    - remove debian/postinst: this is supposed to go into the sysvinit
      package in Debian, but we don't ship that.
    - debian/control: sysvinit-utils recommends the upstart that provides
      the reload action
    - Mark all binary packages as Multi-Arch: foreign to allow for upstart
      to be installable with multi-arch (needed for armhf containers on x86)
    - Add a versioned depends to initscripts of mountall (>= 2.28), since
      everything else depends on initscripts for /run and the boot-time
      implementation is in mountall for us.
    - Drop /etc/default/tmpfs, and drop mention of it from
      debian/src/initscripts/man/rcS.5.
    - Added debian/src/initscripts/etc/init.d/ondemand: Sleep for 60 seconds,
      then set CPU Frequency Scaling governor to "ondemand" (or to
      "interactive" on systems that support it).
    - Remove mention of RAMLOCK, RAMSHM, and RAMTMP from the rcS(5) manual
      page.
    - When /dev/shm and /run/shm are both directories (not mounts), make
      /dev/shm a symlink to /run/shm.
    - d/service/service: Use 'stop/start' instead of passing restart
      directly through to upstart.
    - d/service/service.8: Document handling of upstart jobs.
    - Fix documentation for other things handled by mountall instead of
      initscripts: tmpfs, /sys (mountall lets you specify options in
      /etc/fstab), and ASYNCMOUNTNFS.
    - debian/src/initscripts/etc/init.d/sendsigs:
      + sendsigs: OMITPIDS needs to be reinitalized for every loop iteration
        before concatenating pids of upstart jobs to it.
      + only omit jobs that are in the 'start' goal or that are in state
        'stop/killed'. Those that are destined for 'stop' are waited on and
        killed like all other processes.
      + make report_unkillable use apport instead of echoing to console; but
        disable this reporting by default.
      + wait up to 300 extra seconds for upstart jobs that have been killed.
    - debian/src/sysv-rc/sbin/invoke-rc.d: replace RUNLEVEL with
      RUNLEVELHELPER.
  * Changes included in Debian:
    - debian/initscripts/etc/init.d/umountnfs.sh: emit upstart event
      unmounted-remote-filesystems
    - debian/src/initscripts/etc/init.d/sendsigs: handle the possibility of
      upstart jobs being started after the script starts running.
  * Dropped changes:
    - /lib/init/rw symlink to /run no longer needed, everything should now
      be using /run directly.
    - debian/src/initscripts/etc/init.d/umountroot: /run migration was
      completed before 12.04 LTS, this delta can now be dropped.
      LP: #1097321.
    - debian/initscripts.postinst: drop bypassing of motd.tail handling,
      which is no longer used in Debian.
    - Disable bootlogd by default: this is now a separate package not
      installed by default, no delta needed.
    - clean up /run/motd on upgrades: pre-LTS cleanup that is no longer
      needed.
    - Removing RAM* settings from /etc/default/rcS: these are no longer
      present in the Debian version of the file either.
    - Skip /var/run, /var/lock when unmounting filesystems: no longer needed,
      these will always be mounted under /run now which is already handled.
    - Upgrade handling for insserv-broken shutdown sequences: this was
      pre-LTS cleanup.
  * Fix initial generation of /run/motd.dynamic to conform to update-motd
    usage in pam_motd.
  * Drop new /etc/init.d/motd script, which is redundant with update-motd.
  * Relax Breaks: on old upstart to not trigger on the precise version, which
    doesn't have the incompatibility.
  * Adjust Breaks from initscripts on ifupdown; Ubuntu has had ifquery for a
    long time.
  * Revert migration of UTC setting from /etc/default/rcS to /etc/adjtime,
    dropping the corresponding Breaks: on util-linux.
  * Drop Breaks on console-setup, not needed because Ubuntu never had
    console-setup 1.73.
  * Drop Breaks on live-build, which *supports* /lib/init/rw as a mountpoint
    but does not use it.
  * Ignore change to make /etc/mtab a symlink (mostly happens automatically
    because we aren't using the initscripts rcS scripts).  This should be
    done only once /run/mount/utab works correctly (bug #702935).
  * Drop debian/initscripts.NEWS, which documents only Debian-specific
    changes that don't apply in Ubuntu.
  * Drop bind-mount handling on upgrade of initscripts.  The upstream
    refactoring means these functions have moved to a shell library that we
    don't otherwise care about shipping, and this is only relevant for
    pre-12.04 upgrades but the postinst doesn't include a version guard; so
    just delete this redundant code.
  * Fix wrong auto-upgrading of /etc/default/rcS to a conffile.  We should
    not store a copy of the old one if we know it's not user-modified, and
    we should *not* generate this in the preinst, but instead trust dpkg to
    install it.
  * Revert forced migration to dependency-based booting; this can only be
    done once all upstart-job-using packages in Ubuntu have been rebuilt
    with a newer debhelper that retains init scripts, otherwise insserv
    has insufficient information and will mangle the shutdown order.
  * Don't duplicate the /etc/default/rcS conffile with a template in the
    preinst; unmodified files should just be removed, and created
    automatically by dpkg.
  * Properly clean up bootlogd conffiles on upgrade using dpkg-maintscript,
    instead of leaving them orphaned on the filesystem when the bootlogd
    package is not installed.
  * On upgrade, recognize Ubuntu-specific md5sums of unmodified
    /etc/default/rcS files.

sysvinit (2.88dsf-41) unstable; urgency=low

[ Roger Leigh ]:
  * sysvinit postinst always creates /etc/inittab if absent during
    configuration (Closes: #700051).

sysvinit (2.88dsf-40) unstable; urgency=low

[ Roger Leigh ]:
  * Don't restart init on GNU/Hurd (Closes: #663009).
  * Handle PID detection more robustly, to work better with containers
    (Closes: #699523).  Always use PID1, which avoids the need for
    fragile pidof usage.
  * Handle ischroot more gracefully on failure (Closes: #699566).

sysvinit (2.88dsf-39) unstable; urgency=low

[ Roger Leigh ]:
  * initscripts postinst calls urandom, not urandom.sh (Closes: #698966).
  * sysvinit postinst unconditionally creates a compatibility initctl
    link to ensure the migration to /run won't fail (Closes: #663009).

sysvinit (2.88dsf-38) unstable; urgency=low

[ Roger Leigh ]:
  * If pidof fails in the sysvinit postinst or initscripts, default
    to PID 1 (for /sbin/init) (Closes: #663009).
  * Make fstab globbing in initscripts completely robust.

sysvinit (2.88dsf-37) unstable; urgency=low

[ Roger Leigh ]
  * initscripts: Remove all use of shell heredocs in shell libraries;
    these require a writable /tmp which will not be guaranteed to be
    present in early boot (Closes: #697994).

sysvinit (2.88dsf-36) unstable; urgency=low

[ Roger Leigh ]
  * initscripts:
    - Handle globbing of /etc/fstab.d/* safely.
    - Correct erroneous error that an entry for /dev/shm existed in
      /etc/fstab when no entry was present (Closes: #697537).

sysvinit (2.88dsf-35) unstable; urgency=low

[ David Prévot ]
  * Fix German translation charset.

[ Roger Leigh ]
  * initscripts:
    - To permit enabling of dependency-based boot, add Breaks on older
      versions of bootchart.  Thanks to Andreas Beckmann.
      Closes: #694252.
    - To work around a bug in the Oracle database, which has a faulty
      check for /dev/shm, continue to mount a tmpfs on /dev/shm rather
      than /run/shm if one is defined in /etc/fstab.  Closes: #694379.
  * sysvinit-utils:
    - Add Breaks: upstart (<< 1.5-1) to avoid breaking the boot with
      older versions of upstart.  Closes: #694961.

sysvinit (2.88dsf-34) unstable; urgency=low

[ Roger Leigh ]
  * initscripts: Don't run mountall until checkroot-bootclean is finished.

[ Steve Langasek ]
  * initscripts.postinst: hide from lintian the fact that we're removing
    /dev/shm, since otherwise a buggy lintian check prevents us from
    uploading legitimate code to the archive.

sysvinit (2.88dsf-33) unstable; urgency=low

[ David Prévot ]
  * Updated debconf translations:
    - es.  Thanks to Javier Fernández-Sanguino.  Closes: #686774, #682560.
    - pt_BR.  Thanks to Adriano Rafael Gomes.  Closes: #686906.

[ Roger Leigh ]
  * All bootclean scripts run before bootmisc.  Closes: #677097.

[ Steve Langasek ]
  * when running under upstart, emit an 'unmounted-remote-filesystems' event
    when we're done unmounting in umountnfs.sh so that upstart can finish
    shutting down.
  * make the startpar bridge track stopped jobs, not just started ones;
    required for us to have a smooth event-based shutdown with upstart.

sysvinit (2.88dsf-32) unstable; urgency=low

[ Roger Leigh ]
  * Apply patch to startpar to prevent the use of mlockall on
    kFreeBSD, which was causing a kernel panic at boot.  Thanks to
    Petr Salinger for this patch.  Closes: #672959.
  * Correctly detect service availability with service(8).  Thanks
    to Alexander Golov for this patch.  Closes: #685212.

sysvinit (2.88dsf-31) unstable; urgency=low

[ Roger Leigh ]
  * initscripts:
    - Remove debugging echo statement from postinst.

sysvinit (2.88dsf-30) unstable; urgency=low

[ Roger Leigh ]
  * initscripts:
    - Fix /dev/shm to /run/shm migration bug which occurred in chroots
      when /dev/shm was a mountpoint but /dev was not.  Check
      specifially for /dev, /dev/shm, run or /run/shm being a mountpoint
      before attempting to migrate.  This copes with all combinations of
      mountpoints, directories and symlinks.  Closes: #683103.

sysvinit (2.88dsf-29) unstable; urgency=low

[ Steve Langasek ]
  * initscripts:
    - Improve /dev/shm to /run/shm upgrade handling in the postinst
      (improvement for #674178).

[ Roger Leigh ]
  * initscripts:
    - Remove /lib/init/rw if possible.  Closes: #679612.
    - If /run is a symlink to /var/run, correct this on both upgrade
      and on boot.  On upgrade, the proper /run migration will occur
      on reboot.  On boot, the system will require rebooting to fully
      migrate /run to a working configuration (but this will only
      occur on systems which are already broken, it's not an upgrade
      path).  This correct problems with udev breakage due to /run
      being mounted twice when /run is a symlink.
      Closes: #677097, #679523.
    - Start urandom on initial install, so that a random seed exists on
      first boot.  Closes: #679972.
    - Restore creation of /var/log/dmesg (Closes: #681639).
  * sysv-rc:
    Remove unused debconf logic in postinst.

sysvinit (2.88dsf-28) unstable; urgency=low

[ Steve Langasek ]
  * debian/patches/upstart_support.patch: add missing
    startpar-upstart-inject manpage.

[ Roger Leigh ]
  * Updated debconf translations:
    - ca.  Thanks to Innocent De Marchi.  Closes: #677904.
    - cs.  Thanks to Miroslav Kure.  Closes: #678680.
    - da.  Thanks to Joe Hansen.  Closes: #676893.
    - de.  Thanks to Chris Leick.  Closes: #677753.
    - fr.  Thanks to Steve Petruzzello.  Closes: #677590.
    - gl.  Thanks to Jorge Barreiro.  Closes: #678627.
    - nl.  Thanks to Jeroen Schot.  Closes: #677333.
    - pl.  Thanks to Michał Kułach.  Closes: #676773.
    - pt.  Thanks to Miguel Figueiredo.  Closes: #676814.
    - ru.  Thanks to Yuri Kozlov.  Closes: #677011.
    - sk.  Thanks to Slavko.  Closes: #676721.
    - sv.  Thanks to Martin Bagge.  Closes: #676791.
    - zh_CN.  Thanks to YunQiang Su.  Closes: #676725.
  * Add missing hardening CPPFLAGS.  Thanks to Simon Ruderich.
    Closes: #678878.
  * Update clean run to cope with nonexistent startpar.
  * initscripts:
    - Only run update-rc.d in maintainer scripts when the init
      script exists and is executable.  Closes: #671124.
    - Break initramfs-tools (<< 0.104), needed to prevent initrd
      generation failure since older initramfs-tools can't cope with
      /etc/mtab being a symlink.  Closes: #668650.
    - Don't mount with -o nodev on kFreeBSD.  Closes: #669162.
    - Set up /run correctly in a chroot when running debootstrap.
      Thanks to Serge Hallyn.  initscripts.postinst: if /dev is not a
      separate partition and we're in a chroot, then create /run/shm
      and make /dev/shm a symbolic link to it, as we would expect to
      find in a upgraded and rebooted running system. LP: #974584.
      Closes: #674178.
  * sysvinit:
    - rc and startpar distinguish between LSB not installed and
      not configured failure conditions.  Thanks to Nate Coraor.
      Closes: #625463.
  * sysv-rc:
    - Dependency-based booting is activated unconditionally.  Scripts
      without LSB headers will generally be ordered after all other
      scripts, but before scripts requiring $all to be started, such as
      rc.local, but this is not guaranteed.  Add an LSB header if you
      need to guarantee the ordering of scripts.
      Closes: #676463, #678231, #676473.
    - update-rc.d uses absolute path to insserv, to give better error
      messages to non-root users where /sbin is not in the PATH.
      Thanks to Regid Ichira.  Closes: #637390.

[ Paul Menzel ]
  * Fix usage message in /etc/init.d/motd.  Closes: #676910.

sysvinit (2.88dsf-27) unstable; urgency=low

[ Salvatore Bonaccorso ]
  * Remove reference to /usr/share/initscripts/default.rcS.
    With commit d0388ba464e69b1b7915a3d9071cfcba21d0102c /etc/default/rcS
    was made a regular conffile. Remove reference to original location with
    default values.

[ Roger Leigh ]
  * initscripts:
    - Don't fail in the absence of /proc/meminfo.  The ram_size and
      swap_size functions in /lib/init/tmpfs.sh always return true.
      Closes: #676669.

sysvinit (2.88dsf-26) unstable; urgency=low

[ Roger Leigh ]
  * initscripts:
    - /run/shm is mounted noexec.  Closes: #386368.
    - The RAMSHM and RAMTMP settings in /etc/default/rcS are used if
      present, though the replacement settings in /etc/default/tmpfs
      will override these, if enabled.
    - Revert RAMTMP setting to be disabled by default.
      Closes: #630615, #665635, #666698, #674517.
    - Don't prompt the user on upgrade if rcS was not modified by
      the admin.  Closes: #674460.
  * sysvinit-utils:
    - Fix typo in fstab-decode(8).  Thanks to Bjarni Ingi Gislason.
      Closes: #674208.

sysvinit (2.88dsf-25) experimental; urgency=low

[ Roger Leigh ]
  * Build with hardening flags enabled; CFLAGS and LDFLAGS are passed
    to all build commands.
  * initscripts:
    - /etc/default/rcS is no longer managed by ucf, and is a regular
      conffile.  Drop the UTC setting, which has been migrated to
      /etc/adjtime by util-linux.  Break util-linux << 2.20.1-5 in order
      to ensure correct migration of the UTC setting before the file is
      upgraded.
    - Use ifquery in /etc/network/if-up.d/mountnfs to replace complex
      parsing.  Also only run if inet or inet6 interfaces have been
      configured, to avoid freezing when the interface hasn't yet
      been configured (Closes: #674039).
    - %VM tmpfs size calculation works when swap is disabled.

sysvinit (2.88dsf-24) experimental; urgency=low

[ Roger Leigh ]
  * initscripts:
    - Don't generate or touch /etc/motd.  Instead, the dynamic part of
      /etc/motd is created as /run/motd.dynamic, leaving /etc/motd
      entirely under the control of the system administrator.  If
      /etc/motd is a symlink to /run/motd, /etc/motd.tail is moved
      back to /etc/motd.  Closes: #353229, #624391, #668307.  /etc/motd
      is not removed if initscripts is purged, since it's not owned by
      initscripts.
    - By default, /run/motd is just the output of uname, preserving the
      existing behaviour.  However, should the administrator wish to
      include dynamic information in the motd, they may write scripts
      to update /run/motd.dynamic as they please.  Closes: #437176.
    - motd generation is split from bootlogs into a separate motd
      init script.
    - bootlogs init script has been removed; current logging daemons
      handle this themselves, making this script redundant.
    - tmpfs mounts are never cleaned by bootclean.sh.  Cleaning /run
      can lead to nonfunctional input when Xorg starts.  Closes: #669949.
  * sysvinit-utils:
    - Suggest rather than Recommend bootlogd.

[ Kel Modderman ]
  * sysv-rc:
    - Run check_divert in postinst to make sure /usr/sbin/update-rc.d
      not symlinked to /usr/sbin/update-rc.d-insserv.  Closes: #670085.

[ Steve Langasek ]
  * Install the startpar bridge now that dh_installinit in Debian handles
    this.  Closes: #660824.
  * Give startpar a listening backlog on its socket for upstart connections,
    since there's no protocol-level queuing for unix sockets and these
    connections tend to come in fast and furious at boot.
  * Add upstart support to invoke-rc.d, per the policy discussion in bug
    #591791.  Closes: #671284.

sysvinit (2.88dsf-23) experimental; urgency=low

[ Roger Leigh ]
  * Acknowledge NMU for translation updates.  Thanks to Christian
    Perrier.
  * debian/control:
    - Upgrade to Standards-Version 3.9.3.
    - Build-Depend on debhelper v9.
    - Correct Vcs-Git URL.
  * debian/rules:
    - Use DEB_HOST_ARCH_OS = hurd rather than
      DEB_HOST_ARCH = hurd-i386.   Thanks to Pino Toscano.
  * debian/patches:
    - 11_lfs_cflags.patch: Add patch for enabling large file support,
      needed on GNU/Hurd, but useful for all platforms.  LP: #767244.
    - 73_lfs_cflags.patch: Add patch for enabling large file support
      in startpar.
  * initscripts:
    - Moved RAM* settings from /etc/default/rcS to /etc/default/tmpfs.
      This ensures that the settings are equivalent for upgrades and
      new installations, but will require manual configuration of the
      settings for upgrades (no migration from /etc/default/rcS to
      /etc/default/tmpfs will take place, due to tmpfs being a
      conffile).  tmpf(5) manual page added to document all aspects
      of tmpfs configuration, including the existing documentation in
      rcS(5).
    - Drop the use of .ramfs dotfiles in /run and /run/lock.  These
      were a legacy of /lib/init/rw and were not actually used by
      anything.  Closes: #403863.
    - Drop /etc/init.d/mountoverflowtmp.  This has been merged into
      the general tmpfs on /tmp handling functions.  This means the
      generic RAMTMP configuration is used for the overflowtmp.
      Closes: #567539.
    - It is now possible to configure a tmpfs mount size limit as a
      percentage of the total VM size (%VM) as well as a percentage
      of the RAM size (%).  This is computed by tmpfs.sh and the
      tmpfs mounts are remounted with the updated size limit after
      swap becomes available.
    - An fstab entry for /tmp overrides RAMTMP.  Document tmpfs
      override and tmpfs defaults in tmpfs(5), also undeprecating the
      tmpfs settings.  Closes: #585540, #665995.
    - An fstab entry for /run/lock or /run/shm overrides RAMLOCK and
      RAMSHM.
    - bootclean cleans /tmp, /run and /run/lock before any filesystems
      are mounted as well as after local and network mounts.  This
      permits cleaning of directories which would otherwise be hidden
      by mountpoints later in the boot process.
      Closes: #55707, #558000, #666871.  Additionally clean up
      /lib/init/rw in case any files were hidden by the (now removed)
      tmpfs mount at this location.  Closes: #652625.
    - Removed last trace of the long-removed EDITMOTD from the
      postinst.  Closes: #438895.
    - Removed documentation of #346342 in rcS(5).  This is no longer
      an issue now tzdata keeps a copy of the data on the rootfs.
      Closes: #385172.
    - Correct description of TMPTIME in rcS(5).  Thanks to Alan J.
      Greenberger.  Closes: #562500.
    - urandom: Applied a series of patches from John Denker to
      improve the integrity of random number generation.  Many thanks.
      Closes: #596479, #596480, #596481, #596482, #596483, LP: #947041.
  * sysv-rc:
    - Remove old upgrade logic from maintainer scripts not required
      for wheezy.
    - Migrate users of obsolete static boot ordering to dynamic boot
      ordering.
    - Remove use of /etc/init.d/.legacy-bootordering.  Closes: #668312.
    - Improve help text of debconf message when it is not possible to
      automatically enable dynamic boot ordering.  Provide explicit
      instructions for how to purge obsolete init scripts.
      Closes: #550425.
    - etc/init.d/rc: Ensure linprocfs is mounted on kFreeBSD.  Thanks
      to Robert Millan.  Closes: #659480.
    - Drop undocumented CONCURRENCY setting from /etc/init.d/rc.
      Closes: #518249, #540448, #539261.  Note that this still contains
      internal fallbacks to support non-insserv booting, which may be
      removed at a later date.
    - invoke-rc.d:
      + Minor manual page corrections.  Thanks to Anthony Fiumara.
        Closes: #664816.
      + Remove mention of the "dpkg Programmers' Manual" and replace
        with references to Debian Policy.  Closes: #543793.
    - update-rc.d:
      + Correctly warn about non-LSB standard runlevels.  Thanks to
        Chris Hiestand for this patch.  Closes: #614895.
      + Remove obsolete documentation of
        /var/lib/sysv-rc/legacy-bootsequence.  Thanks to Thomas Hood.
        Closes: #623051.
  * sysvinit:
    - Minor corrections for halt(8) manual page.  Thanks to
      Christoph Anton Mitterer.  Closes: #587923.
    - Installation with debootstrap --variant=fakechroot now works, due
      to only migrating the old control channel when it is still
      present.  Thanks to Michael Gilbert.  Closes: #596284.
  * sysvinit-utils:
    - Recommend bootlogd.  Closes: #659490.  This means that booklogd
      will be installed by default, but will be removable.
      Closes: #232569.
    - Correct documentation of the startpar -i option.  Closes: #545438.
    - Correct startpar(8) SEE ALSO section.  Closes: #634146.
    - Correct wording in service(8).  Thanks to Joey Hess and Regid
      Ichira.  Closes: #545401, #667745.

[ Steve Langasek ]
  * debian/service/service: fix upstart compatibility to not try to use the
    upstart commands when init isn't upstart.  Closes: #636054.
  * debian/rules: pass CFLAGS when building startpar.
  * Fix startpar to not run init scripts that have matching upstart jobs,
    instead waiting for a signal from upstart.  Closes: #660824.
  * sysvinit:
    - Don't restart or perform initctl migration if systemd is
      running.

sysvinit (2.88dsf-22.1) unstable; urgency=low

* Non-maintainer upload.
  * Fix pending l10n issues. Debconf translations:
    - Dutch; (Jeroen Schot).  Closes: #626270
    - Polish (Michał Kułach).  Closes: #658156

sysvinit (2.88dsf-22) unstable; urgency=low

[ Roger Leigh ]
  * mountall.sh uses mknod rather than mkfifo (Closes: #658045).

sysvinit (2.88dsf-21) unstable; urgency=low

[ Roger Leigh ]
  * debian/patches/72_path_max.patch: New patch for startpar.  Don't
    use PATH_MAX, to fix compilation on GNU/Hurd.

sysvinit (2.88dsf-20) unstable; urgency=low

[ Roger Leigh ]
  * debian/patches/71_signalfd.patch: New patch for startpar.  Don't
    include <sys/signalfd.h>, which is not used and breaks
    compilation on architectures not having this Linux-specific
    header.  (Closes: #657676)
  * sysvinit:
    - Don't restart init when a chroot is detected, to avoid lengthy
      timeouts.  Use ischroot from debianutils to determine whether
      the postinst is being run in a chroot environment, as already
      done by initscripts.

sysvinit (2.88dsf-19) unstable; urgency=low

[ Roger Leigh ]
  * debian/control:
    - initscripts adds versioned Breaks on autofs (<< 5) since
      autofs 4.x does not cope with /etc/mtab symlinked to
      /proc/mounts.  Users should upgrade to autofs5, which works
      correctly.  (Closes: #653126)
    - initscripts Breaks aide << 0.15.1-5 and sysklogd << 1.5-6.2 now
      they support /run.
    - sysvinit Pre-Depends on initscripts >= 2.88dsf-13.3 in order
      to transition initctl to /run.
  * sysvinit:
    - /sbin/init control channel FIFO is /run/initctl rather than
      /dev/initctl (Linux) or /etc/.initctl (FreeBSD).  The postinst
      migrates the running init to use the new control channel by
      replacing the old channel with a symlink prior to issuing a
      SIGUSR1 to cause init to reopen its control channel and then
      exec of the new version of init using the new path.  Thanks
      to Robert Millan.  (Closes: #638019)
    - Add Catalan (ca) translation.  Thanks to Innocent De Marchi.
      (Closes: #622785)
  * sysvinit-utils:
    - Upgrade to startpar 0.58.  Thanks to Dr. Werner Fink at SuSE for
      this updated release.  This release incorporates all of the
      existing Debian patchset; debian/patches/7[1-9]* have now been
      dropped.
  * initscripts:
    - mountall.sh recreates /run/initctl and sends SIGUSR1 to init
      if needed.
    - /etc/init.d/rc.local uses only $all in Required-Start;
      $remote_fs and $syslog being redundant.  Thanks to Regid Ichira.
      (Closes: #635025)
    - rcS.5 documents that RAMTMP defaults to yes for new
      installations, and no for upgrades (since RAMTMP is not present
      in /etc/default/rcS).  (Closes: #652337)
    - /etc/default/rcS is updated using ucf.  (Closes: #648433)
    - umountfs uses more sophisticated sed expression to compute
      PROTECTED_MOUNTS, to support unionfs and more complex cases.
      Thanks to Michele Mazzucchi for this patch.  (Closes: #655582)

sysvinit (2.88dsf-18) unstable; urgency=low

[ Roger Leigh ]
  debian/rules: Fix FTBFS on Hurd by moving file renaming to a later
  point in the build.

sysvinit (2.88dsf-17) unstable; urgency=low

[ Roger Leigh ]
  * debian/control:
    - initscripts adds versioned Breaks on readahead-fedora
      (<< 2:1.5.6-3), which removed splash support.  Thanks to Sven
      Joachim.
    - Update initscripts Breaks for fixed version of libpam-mount.
  * initscripts:
    - Document /lib/init/rw removal and cleanup in NEWS.
      (Closes: #652512).
    - /etc/network/if-up.d/mountnfs handles whitespace correctly
      (Closes: #612378).  grep on /etc/network/run/ifstate is corrected
      (inverted the logic).  Thanks to Jamie Heilman and Corey Hickey.
  * sysvinit: Install reboot and halt commands with a -sysv suffix
    on GNU/Hurd.  (Closes: #652830)

[ Josh Triplett ]
  * Split bootlogd into a separate package. (Closes: #545181)

sysvinit (2.88dsf-16) unstable; urgency=low

[ Roger Leigh ]
  * debian/control:
    - initscripts versioned Breaks use correct epochs and binary
      package names.
    - initscripts Breaks libpam-mount <= 2.11-1, which does not
      support a read-only mtab.  This is supported in new upstream
      versions.

sysvinit (2.88dsf-15) experimental; urgency=low

[ Roger Leigh ]
  * /etc/init.d/skeleton: Small whitespace cleanup.  Thanks to
    Peter Eisentraut. (Closes: #651862)
  * Move all patches in debian/startpar/patches to debian/patches
    and make debian/startpar/ content a separate patch applied to
    startpar/.  Build and install startpar in debian/rules.
    (Closes: #652097).

sysvinit (2.88dsf-14) experimental; urgency=low

[ Kel Modderman ]
  * Add support for s390x, thanks to Aurelien Jarno <aurel32@debian.org>.
    (Closes: #641107)

[ Roger Leigh ]
  * debian/rules:
    - Add build-arch and -indep rules. (Closes: #648472)
    - Remove dpatch usage.
    - Use dh and debhelper compat level 9.
  * debian/control:
    - Add git version control information.
    - Upgrade to Standards-Version 3.9.2.
    - Add myself to Uploaders.
  * Use dpkg 3.0 (quilt) source format.  Rediffed
    debian/patches/40_multiarch_libcrypt.patch which was not well
    formed and failed to apply.
  * initscripts:
    - Make /etc/mtab a symlink to /proc/mounts. (Closes: #494001)
      Note that this is only done when the root filesystem is writable
      and /proc/mount is readable.
    - Support the ceph network filesystem. (Closes: #580579).  Thanks
      to Sage Weil.
    - Restore boot-time cleaning of /var/run and /var/lock, used by
      systems which currently do not use a tmpfs for /run.
    - Remove /lib/init/rw: Add Breaks for all packages which used
      /lib/init/rw, and which now use /run.  Unmount and remove
      following upgrade.
    - Don't create /run/.run-transition on upgrade, only on actually
      setting up a transitional bind mount.
    - Add Breaks on all packages previously using /lib/init/rw, in
      order to permit removal of /lib/init/rw.  It is not possible to
      remove prior to rebooting due to initscripts being required to
      be configured by the packages transitioning to /run.  Remove in
      wheezy+1.
    - Remove trailing period from the initscripts init script log
      message.  (Closes: #648881, LP: #662875).  Thanks to Clint Byrum.
    - /etc/network/if-up.d/mountnfs: grep: character class syntax is
      [[:space:]], not [:space:]. (Closes: #631077, #645655).  Thanks to
      Milan Kocian and Jan-Benedict Glaw.  Also simplify function logic
      using a for loop rather than a while loop.  Thanks to Corey Hickey.
  * sysv-rc:
    - Remove splash support and use of removed /dev/.initramfs.
      (Closes: #643558).  Thanks to Michael Biebl.

sysvinit (2.88dsf-13.13) unstable; urgency=low

* Non-maintainer upload.
  * Replace "cons25" with "xterm" on GNU/kFreeBSD.

sysvinit (2.88dsf-13.12) unstable; urgency=low

* Non-maintainer upload.
  * 92_kfreebsd_ifdown.patch: Shut down network interfaces correctly on
    GNU/kFreeBSD.  Thanks Guillem.  (Closes: #606565)
  * Replace `ttyd' with `cuau' in inittab for GNU/kFreeBSD.  Thanks Tuco.
    (Closes: #587162)
  * Use linux-any in debian/control to avoid hardcoded lists of non-Linux
    arches.  (Closes: #634514)

sysvinit (2.88dsf-13.11) unstable; urgency=low

* Non-maintainer upload.
  * initscripts provides /run/sendsigs.omit.d as soon as /run is
    available.
  * initscripts bootlogs: Remove support for /dev/.udev.log,
    which is no longer needed now udev uses /run.
  * initscripts umountroot: Remove ubuntu-specific patch which
    created directories on the root filesystem prior to umounting it.
    This was never applicable to Debian, and is now no longer required
    following the introduction of /run (Closes: #633541).
 -- Steve Langasek <steve.langasek@ubuntu.com>   Fri, 17 May 2013 17:27:13 -0500

Changed in sysvinit (Ubuntu):
status:	Fix Committed → Fix Released

Affects		Status	Importance	Assigned to	Milestone
	sysvinit (Debian)	Fix Released	Unknown	debbugs #596480
	sysvinit (Ubuntu)	Fix Released	Undecided	Unassigned

Ubuntu
sysvinit package

urandom startup script initializes poolsize with incorrect value

Bug Description

Related branches

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntusysvinit package

urandom startup script initializes poolsize with incorrect value

Bug Description

Related branches

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
sysvinit package