[Pkg-puppet-devel] Bug#1003867: Stopping puppet-master: "matching only on non-root pidfile /run/puppet/master.pid is insecure"

Joril jorilx at gmail.com
Mon Jan 17 09:12:36 GMT 2022


Package: puppet-master
Version: 5.5.10-4
Severity: normal

Dear Maintainer,

Using sysvinit, trying to stop puppet-master results in this error:

# service puppet-master stop
[....] Stopping puppet masterstart-stop-daemon: matching only on 
non-root pidfile /run/puppet/master.pid is insecure
  failed!

The fix looks simple though, just adding "-u puppet" to the 
start-stop-daemon invocation:

[cut]
--- /etc/init.d/puppet-master.orig	2022-01-17 09:59:39.412000000 +0100
+++ /etc/init.d/puppet-master	2022-01-17 10:00:21.532000000 +0100
@@ -50,7 +50,7 @@
  }

  stop_puppet_master() {
-    start-stop-daemon --stop --retry TERM/10/KILL/5 --quiet --oknodo 
--pidfile "${PIDFILE}"
+    start-stop-daemon --stop --retry TERM/10/KILL/5 --quiet --oknodo 
--pidfile "${PIDFILE}" -u puppet
  }

  status_puppet_master() {
[/cut]

Many thanks for your time!

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 4.19.0-18-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages puppet-master depends on:
ii  lsb-base  10.2019051400
ii  puppet    5.5.10-4
ii  ruby      1:2.5.1

puppet-master recommends no packages.

puppet-master suggests no packages.

-- no debconf information



More information about the Pkg-puppet-devel mailing list