Bug#894351: gnome-session-binary listens on TCP sockets

[Antonio Ospite]

Package: gnome-session-bin
Version: 3.28.0-1
Severity: normal
Tags: upstream

Dear Maintainer,

I noticed that gnome-session-binary 3.28.0 listens on TCP sockets:

$ sudo ss -tunlp | grep -E '(gnome-session|State)'
Netid State   Recv-Q   Send-Q        Local Address:Port      Peer Address:Port
tcp   LISTEN  0        128                 0.0.0.0:34651          0.0.0.0:*      users:(("gnome-session-b",pid=1554,fd=12))
tcp   LISTEN  0        128                 0.0.0.0:32835          0.0.0.0:*      users:(("gnome-session-b",pid=840,fd=12))
tcp   LISTEN  0        128                    [::]:44309             [::]:*      users:(("gnome-session-b",pid=840,fd=11))
tcp   LISTEN  0        128                    [::]:38204             [::]:*      users:(("gnome-session-b",pid=1554,fd=11))


I don't remember this happening with previous versions.

Talking with upstream it turns out that the issue is caused by the
combination of these two facts:

 1. gnome-session switched to meson as its build system;
 2. the code was still relying on the autoconf variable HAVE_XTRANS to
    disable TCP sockets, and meson was not defining it.

Upstream suggests to cherry-pick this change from the git repository:
https://git.gnome.org/browse/gnome-session/commit/?id=1ece66e683258a0bfa044d074becfe207d04a748

Thanks,
   Antonio


-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.15.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages gnome-session-bin depends on:
ii  dbus-x11                                     1.12.6-2
ii  dconf-gsettings-backend [gsettings-backend]  0.26.1-3
ii  gsettings-desktop-schemas                    3.28.0-1
ii  libc6                                        2.27-2
ii  libegl1                                      1.0.0+git20180308-1
ii  libepoxy0                                    1.4.3-1
ii  libgl1                                       1.0.0+git20180308-1
ii  libgles2                                     1.0.0+git20180308-1
ii  libglib2.0-0                                 2.56.0-4
ii  libgnome-desktop-3-17                        3.28.0-1
ii  libgtk-3-0                                   3.22.29-2
ii  libice6                                      2:1.0.9-2
ii  libjson-glib-1.0-0                           1.4.2-3
ii  libsm6                                       2:1.2.2-1+b3
ii  libsystemd0                                  238-3
ii  libx11-6                                     2:1.6.5-1
ii  libxcomposite1                               1:0.4.4-2
ii  upower                                       0.99.7-2
ii  xwayland                                     2:1.19.6-1

Versions of packages gnome-session-bin recommends:
ii  libpam-systemd  238-3

gnome-session-bin suggests no packages.

-- no debconf information
-- 
Antonio Ospite
https://ao2.it
https://twitter.com/ao2it

A: Because it messes up the order in which people normally read text.
   See http://en.wikipedia.org/wiki/Posting_style
Q: Why is top-posting such a bad thing?