Bug#909750: applications tries to write to /usr/* directories via libfontconfig1

[Paul Gevers]

Hi all,

On Mon, 22 Feb 2021 18:41:15 +0100 Dennis Filder <d.filder at web.de> wrote:
> Fix was in v2.13.91 (c4324f54ee16e648ba91f3e9c66af13ab3b1754c) [1]
> which removed the relevant codepath.

Is the current phase of the bookworm release a good moment to apply this?

> If anyone still deems this worth addressing in 2.13.1, the attached
> patch fontconfig-2.13.1-909750-access-w_ok.patch silences the warning
> through an added writability check.

It's policy violation, I think it's worth to try and fix it.

> However, while looking into this I ran into test suite issues:
> 
> - test/run-test-conf.sh needs dash.patch to work with dash as /bin/sh
> 
> - test/run-test.sh fails if /bin/bwrap (package bubblewrap) is
>   installed; disable-bwrap.patch patches it out.

This last one can probably be dealt with via an Build-Conflicts stanza?

> 1: https://gitlab.freedesktop.org/fontconfig/fontconfig/-/commit/c4324f54ee16e648ba91f3e9c66af13ab3b1754c

Paul
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 495 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-freedesktop-maintainers/attachments/20220506/0d189f4a/attachment.sig>