Bug#909750: applications tries to write to /usr/* directories via libfontconfig1

Dennis Filder d.filder at web.de
Mon Feb 22 17:41:15 GMT 2021


Control: tag -1 + patch

Fix was in v2.13.91 (c4324f54ee16e648ba91f3e9c66af13ab3b1754c) [1]
which removed the relevant codepath.

If anyone still deems this worth addressing in 2.13.1, the attached
patch fontconfig-2.13.1-909750-access-w_ok.patch silences the warning
through an added writability check.

However, while looking into this I ran into test suite issues:

- test/run-test-conf.sh needs dash.patch to work with dash as /bin/sh

- test/run-test.sh fails if /bin/bwrap (package bubblewrap) is
  installed; disable-bwrap.patch patches it out.

IMO this bug is also a good candidate for a bullseye-ignore if no new
upload is made because it only manifested with a non-Debian AppArmor
profile for Firefox, breaks essentially nothing, and also because I
had to manually delete .uuid files below /usr/share/fonts/* to get it
to reproduce.

Regards,
Dennis.

1: https://gitlab.freedesktop.org/fontconfig/fontconfig/-/commit/c4324f54ee16e648ba91f3e9c66af13ab3b1754c
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fontconfig-2.13.1-909750-access-w_ok.patch.gz
Type: application/gzip
Size: 670 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-freedesktop-maintainers/attachments/20210222/5c8f2772/attachment.gz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dash.patch.gz
Type: application/gzip
Size: 607 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-freedesktop-maintainers/attachments/20210222/5c8f2772/attachment-0001.gz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: disable-bwrap.patch.gz
Type: application/gzip
Size: 594 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-freedesktop-maintainers/attachments/20210222/5c8f2772/attachment-0002.gz>


More information about the Pkg-freedesktop-maintainers mailing list