[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#295106: dpkg: postinst/postrm scripts don't work if /var is mounted with noexec



Package: dpkg
Version: 1.10.27
Severity: important


Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Enver ALTIN <ealtin@casdb.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: dpkg: postinst/postrm scripts don't work if /var is mounted with
	noexec
Bcc: Enver ALTIN <ealtin@casdb.com>
X-Reportbug-Version: 3.7.1

Package: dpkg
Version: 1.10.27
Severity: important

For the security point of view, mounting /var and /tmp with noexec is usually believed to be a good idea, since this would protect the system from unauthorized execution of unknown applications. Unfortunately, when /var is mounted, postinst and postrm scripts don't seem to work.

Do you see an easy solution for this?

Thanks,

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages dpkg depends on:
ii  dselect                     1.10.27      a user tool to manage Debian packa
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an

-- no debconf information

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages dpkg depends on:
ii  dselect                     1.10.27      a user tool to manage Debian packa
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an

-- no debconf information



Reply to: