Devuan bug report logs - #851
openrc: Incorrect handling of 'no_new_privs' in openrc-run

Package: openrc; Maintainer for openrc is (unknown); Source for openrc is src:openrc.

Reported by: murzik <lorietta2023@gmail.com>

Date: Tue, 2 Jul 2024 14:14:01 UTC

Severity: grave

Tags: patch, upstream

Found in version 0.45.2-2+deb12u1

Fixed in version 0.52.1-1

Done: Mark Hindley <mark@hindley.org.uk>

Full log

Message #12 received at 851@bugs.devuan.org (full text, mbox, reply):

Received: (at 851) by bugs.devuan.org; 15 Jul 2024 16:34:39 +0000
Return-Path: <mark@hindley.org.uk>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 15 Jul 2024 16:34:39 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id lrjSFV9PlWZMDAAAmSBk0A
	(envelope-from <mark@hindley.org.uk>)
	for <bugs@devuan.org>; Mon, 15 Jul 2024 16:33:35 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 2DD143C4; Mon, 15 Jul 2024 16:33:34 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS,
	T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 7AAE61D
	for <851@bugs.devuan.org>; Mon, 15 Jul 2024 16:33:34 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 485E5C2;
	Mon, 15 Jul 2024 17:33:32 +0100 (BST)
Received: (nullmailer pid 28391 invoked by uid 1000);
	Mon, 15 Jul 2024 16:33:45 -0000
Date: Mon, 15 Jul 2024 17:33:45 +0100
From: Mark Hindley <mark@hindley.org.uk>
To: murzik <lorietta2023@gmail.com>, 851@bugs.devuan.org
Subject: Re: bug#851: openrc: Incorrect handling of 'no_new_privs' in
 openrc-run
Message-ID: <ZpVPaQbJMJpgJBOF@hindley.org.uk>
References: <L520GS.458ZUPZ6DXCP3@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <L520GS.458ZUPZ6DXCP3@gmail.com>
X-Debbugs-No-Ack: No Thanks

Control: tags -1 upstream
Control: fixed -1 0.52.1-1

On Wed, Jul 03, 2024 at 01:12:57AM +1100, murzik wrote:
>    Subject: openrc: Incorrect handling of 'no_new_privs' in openrc-run
>    Package: openrc
>    X-Debbugs-Cc: lorietta2023@gmail.com
>    Version: 0.45.2-2+deb12u1
>    Severity: grave
>    Justification: renders package unusable
>    Tags: patch
>    Dear Maintainer,
>    Supervise-daemon handler
>    supervise_daemon.sh(/lib/rc/sh/supervise-daemon.sh) for openrc-run
>    has problems with handling the no_new_privs parameter!
>    at line 41 we have the following code:
>       ${no_new_privs:+--no_new_privs} \
>    And there is no '--no_new_privs' option in supervise-daemon, only
>    '--no-new-privs'.
>    So, line 41 should be replaced with
>       ${no_new_privs:+--no-new-privs} \

Thanks. This was fixed upstream in version 0.52.1.

Mark

Send a report that this bug log contains spam.

Devuan bug report logs - #851 openrc: Incorrect handling of 'no_new_privs' in openrc-run

Devuan bug report logs - #851
openrc: Incorrect handling of 'no_new_privs' in openrc-run