| 2023-05-26 17:28:23 |
Russell Greene |
bug |
|
|
added bug |
| 2023-05-26 17:31:52 |
Russell Greene |
description |
In a fresh container, installing libdebuginfod-common gives a /etc/profile.d that looks like this:
```
root@32f34f7e271e:/etc/profile.d# ls -lah
total 24K
drwxr-xr-x 1 root root 4.0K May 26 17:23 .
drwxr-xr-x 1 root root 4.0K May 26 17:23 ..
-rw-r--r-- 1 root root 96 Oct 15 2021 01-locale-fix.sh
-rw------- 1 root root 677 May 26 17:23 debuginfod.csh
-rw------- 1 root root 692 May 26 17:23 debuginfod.sh
```
when I login as a nonprivledged user, DEBUGINFOD_URLS is not set because the permissions are incorrect on the profile files. |
In a fresh container, installing libdebuginfod-common gives a /etc/profile.d that looks like this:
```
root@32f34f7e271e:/etc/profile.d# ls -lah
total 24K
drwxr-xr-x 1 root root 4.0K May 26 17:23 .
drwxr-xr-x 1 root root 4.0K May 26 17:23 ..
-rw-r--r-- 1 root root 96 Oct 15 2021 01-locale-fix.sh
-rw------- 1 root root 677 May 26 17:23 debuginfod.csh
-rw------- 1 root root 692 May 26 17:23 debuginfod.sh
```
when I login as a nonprivledged user, DEBUGINFOD_URLS is not set because the permissions are incorrect on the profile files.
```
# dpkg -l | grep libdebug
ii libdebuginfod-common 0.186-1build1 all configuration to enable the Debian debug info server
``` |
|
| 2023-07-07 09:34:26 |
Launchpad Janitor |
elfutils (Ubuntu): status |
New |
Confirmed |
|
| 2023-07-07 20:44:52 |
Sergio Durigan Junior |
bug |
|
|
added subscriber Ubuntu Server |
| 2023-07-07 20:47:58 |
Sergio Durigan Junior |
nominated for series |
|
Ubuntu Jammy |
|
| 2023-07-07 20:47:58 |
Sergio Durigan Junior |
bug task added |
|
elfutils (Ubuntu Jammy) |
|
| 2023-07-07 20:48:04 |
Sergio Durigan Junior |
elfutils (Ubuntu Jammy): status |
New |
Triaged |
|
| 2023-07-07 20:48:06 |
Sergio Durigan Junior |
elfutils (Ubuntu): status |
Confirmed |
Fix Released |
|
| 2023-07-07 20:48:09 |
Sergio Durigan Junior |
elfutils (Ubuntu Jammy): assignee |
|
Sergio Durigan Junior (sergiodj) |
|
| 2023-07-07 20:48:15 |
Sergio Durigan Junior |
elfutils (Ubuntu Jammy): importance |
Undecided |
High |
|
| 2023-07-07 21:32:15 |
Sergio Durigan Junior |
description |
In a fresh container, installing libdebuginfod-common gives a /etc/profile.d that looks like this:
```
root@32f34f7e271e:/etc/profile.d# ls -lah
total 24K
drwxr-xr-x 1 root root 4.0K May 26 17:23 .
drwxr-xr-x 1 root root 4.0K May 26 17:23 ..
-rw-r--r-- 1 root root 96 Oct 15 2021 01-locale-fix.sh
-rw------- 1 root root 677 May 26 17:23 debuginfod.csh
-rw------- 1 root root 692 May 26 17:23 debuginfod.sh
```
when I login as a nonprivledged user, DEBUGINFOD_URLS is not set because the permissions are incorrect on the profile files.
```
# dpkg -l | grep libdebug
ii libdebuginfod-common 0.186-1build1 all configuration to enable the Debian debug info server
``` |
[ Impact ]
Users installing libdebuginfod-common (the package that ships the shell snippets responsible for configuring the DEBUGINFOD_URLS environment variable, which will ultimately be used by GDB to contact the Ubuntu debuginfod service) experience a problem caused by permissions being set too tightly for /etc/profile.d/debuginfod.{sh,csh}. This results in DEBUGINFOD_URLS not being set for non-root users.
[ Test Plan ]
Inside a Jammy container:
# apt install -y libdebuginfod-common
# ls -lah /etc/profile.d/debuginfod*
Verify that the permission of both files allow them to be world-readable.
[ Where problems could occur ]
Care has been taken to not modify existing file permissions unnecessarily by using "g+r,o+r" when invoking chmod, but it is still possible to conceive a scenario where upgrading the package would make the files world-readable when the user is actually expecting otherwise. However, such "regression" would arguably not be something supported because if the intention is to prevent non-root users from making use of debuginfod, there are better ways to achieve it.
[ Original Description ]
In a fresh container, installing libdebuginfod-common gives a /etc/profile.d that looks like this:
```
root@32f34f7e271e:/etc/profile.d# ls -lah
total 24K
drwxr-xr-x 1 root root 4.0K May 26 17:23 .
drwxr-xr-x 1 root root 4.0K May 26 17:23 ..
-rw-r--r-- 1 root root 96 Oct 15 2021 01-locale-fix.sh
-rw------- 1 root root 677 May 26 17:23 debuginfod.csh
-rw------- 1 root root 692 May 26 17:23 debuginfod.sh
```
when I login as a nonprivledged user, DEBUGINFOD_URLS is not set because the permissions are incorrect on the profile files.
```
# dpkg -l | grep libdebug
ii libdebuginfod-common 0.186-1build1 all configuration to enable the Debian debug info server
``` |
|
| 2023-07-07 21:33:27 |
Sergio Durigan Junior |
elfutils (Ubuntu Jammy): status |
Triaged |
In Progress |
|
| 2023-07-07 21:33:47 |
Sergio Durigan Junior |
tags |
|
server-todo |
|
| 2023-07-08 03:43:51 |
Ubuntu Archive Robot |
bug |
|
|
added subscriber Sergio Durigan Junior |
| 2023-07-12 11:24:28 |
Robie Basak |
elfutils (Ubuntu Jammy): status |
In Progress |
Incomplete |
|
| 2024-01-10 01:18:42 |
Sergio Durigan Junior |
tags |
server-todo |
|
|
