Bug#915658: gnome-applets: Fails to build reproducibly: embeds path of su found via PATH

[Gunnar Wolf]

Source: gnome-applets
Version: 3.30-0-1
Severity: important
User: md at linux.it
Usertags: usrmerge

Hello,

You might be aware on the current discussion regarding
/usrmerged-systems breaking package builds for non-/usrmerged systems,
tracked in #914897 and with a long thread in debian-devel starting at
20181120211617.gxnuwxpx2hy445ps at angband.pl

We have found gnome-applets to embed the system path for su — which is
/bin on non-/usrmerged systems, and /usr/bin on /usrmerged systems.

You can look at the full set of differences here:

    https://tests.reproducible-builds.org/debian/dbdtxt/unstable/amd64/gnome-applets_3.30.0-1.diffoscope.txt.gz

Particularly, in the file shipped as /usr/lib/gnome-applets/libmodem-lights-applet.so:

(...) Line 793-:
│ │ │ │ ├── readelf --wide --decompress --hex-dump=.rodata {}
│ │ │ │ │ @@ -9,58 +9,58 @@
│ │ │ │ │    0x00006060 5f69636f 6e5f6e61 6d650061 7574686f _icon_name.autho
│ │ │ │ │    0x00006070 7273006e 6f646520 213d204e 554c4c00 rs.node != NULL.
│ │ │ │ │    0x00006080 54696d65 20636f6e 6e656374 65643a20 Time connected: 
│ │ │ │ │    0x00006090 252e3164 3a252e32 64004e6f 7420636f %.1d:%.2d.Not co
│ │ │ │ │    0x000060a0 6e6e6563 74656400 3c212d2d 20475354 nnected.<!-- GST
│ │ │ │ │    0x000060b0 3a20656e 64206f66 20726571 75657374 : end of request
│ │ │ │ │    0x000060c0 202d2d3e 0a003a3a 002f6e65 74776f72  -->..::./networ
│ │ │ │ │ -  0x000060d0 6b2d636f 6e66002f 62696e2f 7375002d k-conf./bin/su.-
│ │ │ │ │ -  0x000060e0 6300436f 756c6420 6e6f7420 73706177 c.Could not spaw
│ │ │ │ │ -  0x000060f0 6e204753 54206261 636b656e 64003832 n GST backend.82
(...) Line 843-:
│ │ │ │ │ -  0x00006360 6d417070 6c657446 6163746f 72790070 mAppletFactory.p
│ │ │ │ │ -  0x00006370 72656665 72656e63 65730061 626f7574 references.about
│ │ │ │ │ -  0x00006380 00000000 00000000 4361726c 6f732047 ........Carlos G
│ │ │ │ │ +  0x000060d0 6b2d636f 6e66002f 7573722f 62696e2f k-conf./usr/bin/
│ │ │ │ │ +  0x000060e0 7375002d 6300436f 756c6420 6e6f7420 su.-c.Could not 
│ │ │ │ │ +  0x000060f0 73706177 6e204753 54206261 636b656e spawn GST backen

Thanks for looking into this!

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled