Bug#1066898: tracker-extract: always crash - related to sandboxing making chmod from fontconfig to always fail

Alban Browaeys prahal at yahoo.com
Fri Mar 15 05:30:12 GMT 2024


Package: tracker-extract
Version: 3.7~rc-3
Severity: grave
Justification: renders package unusable

Dear Maintainer,

   * What led up to the situation?
   I believe upgrading to Sid from Trixie a few days ago.


mars 15 06:10:37 hermes tracker-miner-fs-3[1633275]: Fontconfig error: Cannot load default config file: Unable to open /etc/fonts/fonts.conf
mars 15 06:10:37 hermes tracker-miner-fs-3[1633275]: Disallowed syscall "chmod" caught in sandbox
mars 15 06:10:37 hermes systemd[1]: Started systemd-coredump at 33956-1633288-0.service - Process Core Dump (PID 1633288/UID 0).
mars 15 06:10:38 hermes systemd[1]: Started drkonqi-coredump-processor at 33956-1633288-0.service - Pass systemd-coredump journal entries to relevant user for potential DrKonqi handling.
mars 15 06:10:38 hermes systemd-coredump[1633289]: Removed old coredump core.tracker-extract.1000.4370b7ec7f8d4cf8998826bce50c6f8b.1553954.1710476363000000.zst.
mars 15 06:10:38 hermes drkonqi-coredump-processor[1633290]: Entry doesn't look like a dump. This may have been a vaccum run. Nothing to process.
mars 15 06:10:38 hermes systemd-coredump[1633289]: [🡕] Process 1633275 (tracker-extract) of user 1000 dumped core.

                                                   Module libsystemd.so.0 from deb systemd-255.4-1+b1.amd64
                                                   Module libudev.so.1 from deb systemd-255.4-1+b1.amd64
                                                   Module libarchive.so.13 from deb libarchive-3.7.2-1.1.amd64
                                                   Module libzstd.so.1 from deb libzstd-1.5.5+dfsg2-2.amd64
                                                   Stack trace of thread 1633287:
                                                   #0  0x00007f50633aa207 __tgkill (libc.so.6 + 0x10a207)
                                                   #1  0x00007f50632dc510 __restore_rt (libc.so.6 + 0x3c510)
                                                   #2  0x00007f50633975a7 __GI___chmod (libc.so.6 + 0xf75a7)
                                                   #3  0x00007f5062297d68 FcDirCacheWrite (libfontconfig.so.1 + 0xbd68)
                                                   #4  0x00007f50622a200b FcDirCacheScan (libfontconfig.so.1 + 0x1600b)
                                                   #5  0x00007f50622a2283 IA__FcDirCacheRead (libfontconfig.so.1 + 0x16283)
                                                   #6  0x00007f506229c7f1 FcConfigAddDirList (libfontconfig.so.1 + 0x107f1)
                                                   #7  0x00007f506229c8c4 IA__FcConfigBuildFonts (libfontconfig.so.1 + 0x108c4)
                                                   #8  0x00007f50622a8d8c FcInitLoadOwnConfigAndFonts (libfontconfig.so.1 + 0x1cd8c)
                                                   #9  0x00007f5062298f26 FcConfigEnsure (libfontconfig.so.1 + 0xcf26)
                                                   #10 0x00007f5062298f8d FcConfigInit (libfontconfig.so.1 + 0xcf8d)
                                                   #11 0x00007f50573a3415 init_in_thread (libpangoft2-1.0.so.0 + 0xc415)
                                                   #12 0x00007f50638ffab1 g_thread_proxy (libglib-2.0.so.0 + 0x87ab1)
                                                   #13 0x00007f506332845c start_thread (libc.so.6 + 0x8845c)
                                                   #14 0x00007f50633a8bbc __clone3 (libc.so.6 + 0x108bbc)

                                                   Stack trace of thread 1633280:
                                                   #0  0x00007f50633a1059 syscall (libc.so.6 + 0x101059)
                                                   #1  0x00007f506392dc90 g_cond_wait_until (libglib-2.0.so.0 + 0xb5c90)
                                                   #2  0x00007f506389c143 g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x24143)
                                                   #3  0x00007f50639004ba g_thread_pool_wait_for_new_task (libglib-2.0.so.0 + 0x884ba)
                                                   #4  0x00007f50638ffab1 g_thread_proxy (libglib-2.0.so.0 + 0x87ab1)
                                                   #5  0x00007f506332845c start_thread (libc.so.6 + 0x8845c)
                                                   #6  0x00007f50633a8bbc __clone3 (libc.so.6 + 0x108bbc)

                                                   Stack trace of thread 1633275:
                                                   #0  0x00007f50639db4a5 elf_get_dynamic_info (ld-linux-x86-64.so.2 + 0x74a5)
                                                   #1  0x00007f50639dc4e5 _dl_map_object (ld-linux-x86-64.so.2 + 0x84e5)
                                                   #2  0x00007f50639d66d1 openaux (ld-linux-x86-64.so.2 + 0x26d1)
                                                   #3  0x00007f50639d5489 __GI__dl_catch_exception (ld-linux-x86-64.so.2 + 0x1489)
                                                   #4  0x00007f50639d6a3a _dl_map_object_deps (ld-linux-x86-64.so.2 + 0x2a3a)
                                                   #5  0x00007f50639dfedd dl_open_worker_begin (ld-linux-x86-64.so.2 + 0xbedd)
                                                   #6  0x00007f50639d5489 __GI__dl_catch_exception (ld-linux-x86-64.so.2 + 0x1489)
                                                   #7  0x00007f50639df636 dl_open_worker (ld-linux-x86-64.so.2 + 0xb636)
                                                   #8  0x00007f50639d5489 __GI__dl_catch_exception (ld-linux-x86-64.so.2 + 0x1489)
                                                   #9  0x00007f50639dfa28 _dl_open (ld-linux-x86-64.so.2 + 0xba28)
                                                   #10 0x00007f5063324768 dlopen_doit (libc.so.6 + 0x84768)
                                                   #11 0x00007f50639d5489 __GI__dl_catch_exception (ld-linux-x86-64.so.2 + 0x1489)
                                                   #12 0x00007f50639d55af _dl_catch_error (ld-linux-x86-64.so.2 + 0x15af)
                                                   #13 0x00007f5063324257 _dlerror_run (libc.so.6 + 0x84257)
                                                   #14 0x00007f5063324819 dlopen_implementation (libc.so.6 + 0x84819)
                                                   #15 0x00007f506354992b _g_module_open (libgmodule-2.0.so.0 + 0x292b)
                                                   #16 0x00007f505c15c470 _priv_gst_plugin_load_file_for_registry (libgstreamer-1.0.so.0 + 0x9f470)
                                                   #17 0x00007f505c16892d gst_registry_scan_plugin_file (libgstreamer-1.0.so.0 + 0xab92d)
                                                   #18 0x00007f505c1699ef gst_registry_scan_path_level (libgstreamer-1.0.so.0 + 0xac9ef)
                                                   #19 0x00007f505c169d6e gst_registry_scan_path_internal (libgstreamer-1.0.so.0 + 0xacd6e)
                                                   #20 0x00007f505c16bf26 scan_and_update_registry (libgstreamer-1.0.so.0 + 0xaef26)
                                                   #21 0x00007f505c0f9e4a init_post (libgstreamer-1.0.so.0 + 0x3ce4a)
                                                   #22 0x00007f505c0f9f95 init_post (libgstreamer-1.0.so.0 + 0x3cf95)
                                                   #23 0x00007f50638e1e99 g_option_context_parse (libglib-2.0.so.0 + 0x69e99)
                                                   #24 0x00007f505c0fa937 gst_init_check (libgstreamer-1.0.so.0 + 0x3d937)
                                                   #25 0x00007f505c0fa9c8 gst_init (libgstreamer-1.0.so.0 + 0x3d9c8)
                                                   #26 0x00007f505c2208d2 tracker_extract_module_init (libextract-gstreamer.so + 0x98d2)
                                                   #27 0x00007f50639c6abc load_module (libtracker-extract.so + 0x8abc)
                                                   #28 0x00007f50639c76c0 load_module (libtracker-extract.so + 0x96c0)
                                                   #29 0x000055b321c0cbe8 do_main (tracker-extract-3 + 0xbbe8)
                                                   #30 0x00007f50632c76ca __libc_start_call_main (libc.so.6 + 0x276ca)
                                                   #31 0x00007f50632c7785 __libc_start_main_impl (libc.so.6 + 0x27785)
                                                   #32 0x000055b321c0cfd1 _start (tracker-extract-3 + 0xbfd1)

                                                   Stack trace of thread 1633278:
                                                   #0  0x00007f50633a1059 syscall (libc.so.6 + 0x101059)
                                                   #1  0x00007f506392dac4 g_cond_wait (libglib-2.0.so.0 + 0xb5ac4)
                                                   #2  0x00007f506389c16b g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x2416b)
                                                   #3  0x00007f506390013a g_thread_pool_spawn_thread (libglib-2.0.so.0 + 0x8813a)
                                                   #4  0x00007f50638ffab1 g_thread_proxy (libglib-2.0.so.0 + 0x87ab1)
                                                   #5  0x00007f506332845c start_thread (libc.so.6 + 0x8845c)
                                                   #6  0x00007f50633a8bbc __clone3 (libc.so.6 + 0x108bbc)

                                                   Stack trace of thread 1633279:
                                                   #0  0x00007f506339babf __GI___poll (libc.so.6 + 0xfbabf)
                                                   #1  0x00007f50638d2277 g_main_context_poll_unlocked (libglib-2.0.so.0 + 0x5a277)
                                                   #2  0x00007f50638d2930 g_main_context_iteration (libglib-2.0.so.0 + 0x5a930)
                                                   #3  0x00007f50638d2981 glib_worker_main (libglib-2.0.so.0 + 0x5a981)
                                                   #4  0x00007f50638ffab1 g_thread_proxy (libglib-2.0.so.0 + 0x87ab1)
                                                   #5  0x00007f506332845c start_thread (libc.so.6 + 0x8845c)
                                                   #6  0x00007f50633a8bbc __clone3 (libc.so.6 + 0x108bbc)
                                                   ELF object binary architecture: AMD x86-64
mars 15 06:10:38 hermes sudo[1632339]: pam_unix(sudo:session): session closed for user root
mars 15 06:10:38 hermes systemd[1]: systemd-coredump at 33956-1633288-0.service: Deactivated successfully.
mars 15 06:10:38 hermes tracker-miner-f[1002882]: Extractor subprocess died unexpectedly: Le processus fils a été tué par le signal 31


I get such a batch of messages every 5 seconds.

Also:
$ ls -l /etc/fonts/fonts.conf 
-rw-r--r-- 1 root root 2940 31 janv.  2023 /etc/fonts/fonts.conf


$ cat /etc/fonts/fonts.conf "
<?xml version="1.0"?>
<!DOCTYPE fontconfig SYSTEM "urn:fontconfig:fonts.dtd">
<!-- /etc/fonts/fonts.conf file to configure system font access -->
<fontconfig>
	<description>Default configuration file</description>

<!--
	DO NOT EDIT THIS FILE.
	IT WILL BE REPLACED WHEN FONTCONFIG IS UPDATED.
	LOCAL CHANGES BELONG IN 'local.conf'.

	The intent of this standard configuration file is to be adequate for
	most environments.  If you have a reasonably normal environment and
	have found problems with this configuration, they are probably
	things that others will also want fixed.  Please submit any problems
	to the fontconfig issue tracking system located at fontconfig.org

	Note that the normal 'make install' procedure for fontconfig is to
	replace any existing fonts.conf file with the new version.  Place
	any local customizations in local.conf which this file references.

	Keith Packard
-->

<!-- Font directory list -->

	<dir>/usr/share/fonts</dir>
	<dir>/usr/local/share/fonts</dir>
	<dir prefix="xdg">fonts</dir>
	<!-- the following element will be removed in the future -->
	<dir>~/.fonts</dir>

<!--
  Accept deprecated 'mono' alias, replacing it with 'monospace'
-->
	<match target="pattern">
		<test qual="any" name="family">
			<string>mono</string>
		</test>
		<edit name="family" mode="assign" binding="same">
			<string>monospace</string>
		</edit>
	</match>

<!--
  Accept alternate 'sans serif' spelling, replacing it with 'sans-serif'
-->
	<match target="pattern">
		<test qual="any" name="family">
			<string>sans serif</string>
		</test>
		<edit name="family" mode="assign" binding="same">
			<string>sans-serif</string>
		</edit>
	</match>

<!--
  Accept deprecated 'sans' alias, replacing it with 'sans-serif'
-->
	<match target="pattern">
		<test qual="any" name="family">
			<string>sans</string>
		</test>
		<edit name="family" mode="assign" binding="same">
			<string>sans-serif</string>
		</edit>
	</match>
<!--
  Accept alternate 'system ui' spelling, replacing it with 'system-ui'
-->
	<match target="pattern">
		<test qual="any" name="family">
			<string>system ui</string>
		</test>
		<edit name="family" mode="assign" binding="same">
			<string>system-ui</string>
		</edit>
	</match>

<!--
  Ignore dpkg temporary files created in fonts directories
-->
	<selectfont>
		<rejectfont>
			<glob>*.dpkg-tmp</glob>
		</rejectfont>
	</selectfont>
	<selectfont>
		<rejectfont>
			<glob>*.dpkg-new</glob>
		</rejectfont>
	</selectfont>

<!--
  Load local system customization file
-->
	<include ignore_missing="yes">conf.d</include>

<!-- Font cache directory list -->

	<cachedir>/var/cache/fontconfig</cachedir>
	<cachedir prefix="xdg">fontconfig</cachedir>
	<!-- the following element will be removed in the future -->
	<cachedir>~/.fontconfig</cachedir>

	<config>
<!--
  Rescan configuration every 30 seconds when FcFontSetList is called
 -->
		<rescan>
			<int>30</int>
		</rescan>
	</config>

</fontconfig>
"



$ sudo apparmor_status 
apparmor module is loaded.
78 profiles are loaded.
51 profiles are in enforce mode.
   /snap/core/16574/usr/lib/snapd/snap-confine
   /snap/core/16574/usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /snap/core/16928/usr/lib/snapd/snap-confine
   /snap/core/16928/usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /usr/bin/evince
   /usr/bin/evince-previewer
   /usr/bin/evince-previewer//sanitized_helper
   /usr/bin/evince-thumbnailer
   /usr/bin/evince//sanitized_helper
   /usr/bin/evince//snap_browsers
   /usr/bin/man
   /usr/bin/pidgin
   /usr/bin/pidgin//sanitized_helper
   /usr/bin/totem
   /usr/bin/totem-audio-preview
   /usr/bin/totem-video-thumbnailer
   /usr/bin/totem//sanitized_helper
   /usr/lib/NetworkManager/nm-dhcp-client.action
   /usr/lib/NetworkManager/nm-dhcp-helper
   /usr/lib/connman/scripts/dhclient-script
   /usr/lib/cups/backend/cups-pdf
   /usr/lib/snapd/snap-confine
   /usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /usr/lib/telepathy/mission-control-5
   /usr/lib/telepathy/telepathy-*
   /usr/lib/telepathy/telepathy-*//pxgsettings
   /usr/lib/telepathy/telepathy-*//sanitized_helper
   /usr/lib/telepathy/telepathy-ofono
   /usr/libexec/geoclue
   /usr/sbin/cups-browsed
   /usr/sbin/cupsd
   /usr/sbin/cupsd//third_party
   /usr/sbin/ntpd
   /{,usr/}sbin/dhclient
   apt-cacher-ng
   docker-default
   libreoffice-senddoc
   libreoffice-soffice//gpg
   libreoffice-xpdfimport
   libvirtd
   libvirtd//qemu_bridge_helper
   lsb_release
   man_filter
   man_groff
   nvidia_modprobe
   nvidia_modprobe//kmod
   snap-update-ns.audible-for-linux
   snap-update-ns.core
   snap.audible-for-linux.audible-for-linux
   snap.core.hook.configure
   virt-aa-helper
27 profiles are in complain mode.
   /usr/bin/irssi
   avahi-daemon
   dnsmasq
   dnsmasq//libvirt_leaseshelper
   identd
   klogd
   libreoffice-oosplash
   libreoffice-soffice
   mdnsd
   nmbd
   nscd
   php-fpm
   ping
   samba-bgqd
   samba-dcerpcd
   samba-rpcd
   samba-rpcd-classic
   samba-rpcd-spoolss
   smbd
   smbldap-useradd
   smbldap-useradd///etc/init.d/nscd
   syslog-ng
   syslogd
   traceroute
   zgrep
   zgrep//helper
   zgrep//sed
0 profiles are in kill mode.
0 profiles are in unconfined mode.
15 processes have profiles defined.
6 processes are in enforce mode.
   /usr/sbin/cups-browsed (1606622) 
   /usr/sbin/cupsd (1606505) 
   /usr/sbin/ntpd (452942) 
   /usr/sbin/ntpd (452943) 
   /usr/sbin/ntpd (452966) 
   /portainer (453387) docker-default
9 processes are in complain mode.
   /usr/sbin/avahi-daemon (1606354) avahi-daemon
   /usr/sbin/avahi-daemon (1606363) avahi-daemon
   /usr/sbin/nmbd (947283) nmbd
   /usr/libexec/samba/samba-dcerpcd (1670805) samba-dcerpcd
   /usr/libexec/samba/rpcd_lsad (1670837) samba-rpcd
   /usr/libexec/samba/rpcd_lsad (1670841) samba-rpcd
   /usr/sbin/smbd (1606487) smbd
   /usr/sbin/smbd (1606519) smbd
   /usr/sbin/smbd (1606520) smbd
0 processes are unconfined but have a profile defined.
0 processes are in mixed mode.
0 processes are in kill mode.



-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'stable-debug'), (500, 'oldstable-debug'), (500, 'oldoldstable'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.8.0-rc7+ (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages tracker-extract depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.40.0-4+b2
ii  libblkid1                                    2.39.3-10
ii  libc6                                        2.37-15.1
ii  libcue2                                      2.2.1-4.1
ii  libexempi8                                   2.6.5-1
ii  libexif12                                    0.6.24-1+b1
ii  libgexiv2-2                                  0.14.2-2+b2
ii  libgif7                                      5.2.2-1
ii  libglib2.0-0t64                              2.78.4-4
ii  libgsf-1-114                                 1.14.51-2+b1
ii  libgstreamer-plugins-base1.0-0               1.24.0-1
ii  libgstreamer1.0-0                            1.24.0-1
ii  libgxps2t64                                  0.3.2-4+b1
ii  libicu72                                     72.1-4+b1
ii  libiptcdata0                                 1.0.5-2.3
ii  libjpeg62-turbo                              1:2.1.5-2+b2
ii  libosinfo-1.0-0                              1.11.0-2+b1
ii  libpng16-16t64                               1.6.43-3
ii  libpoppler-glib8t64                          22.12.0-2.2
ii  libseccomp2                                  2.5.5-1
ii  libtiff6                                     4.5.1+git230720-4
ii  libtotem-plparser18                          3.26.6-1+b2
ii  libtracker-sparql-3.0-0                      3.7~rc-3
ii  libxml2                                      2.9.14+dfsg-1.3+b2
ii  tracker                                      3.7~rc-3

tracker-extract recommends no packages.

tracker-extract suggests no packages.

-- no debconf information


More information about the pkg-gnome-maintainers mailing list