Bug#992747: qgis-providers: upgrade to 3.16.10+dfsg-1: crssync created file in root dir: /.config/Unknown Organization/crssync.conf

Paul Wise pabs at debian.org
Mon Aug 23 03:47:54 BST 2021 

Package: qgis-providers
Version: 3.16.10+dfsg-1
Severity: serious
Usertags: cruft

The upgrade to 3.16.10+dfsg-1 runs crssync from a trigger. This appears
to have created a file in the root directory / (not /root) but package
maintscripts should not create files outside of the /etc /var FHS dirs.

Probably the workaround to this is to create a temporary directory, run
crssync from there and clean up the directory afterwards.

$ find /.config/
/.config/
/.config/Unknown Organization
/.config/Unknown Organization/crssync.conf

$ find /.config/ -ls
   786433      4 drwxr-xr-x   3 root     root         4096 Aug 23 01:06 /.config/
   786434      4 drwxr-xr-x   2 root     root         4096 Aug 23 01:06 /.config/Unknown\ Organization
   786436      4 -rw-r--r--   1 root     root           39 Aug 23 01:06 /.config/Unknown\ Organization/crssync.conf

$ head -vn-0 '/.config/Unknown Organization/crssync.conf'
==> /.config/Unknown Organization/crssync.conf <==
[qgis]
localized_data_paths=@Invalid()

$ find /var/lib/dpkg/info/ -iname *qgis* -print0 | xargs -0 grep -C3 crssync
/var/lib/dpkg/info/qgis-providers.md5sums:520dd53ec7c06525d237428b26a835bd  usr/lib/qgis/crssync
/var/lib/dpkg/info/qgis-providers.md5sums-1143645206cd6dc0a226a1e1948def6e  usr/lib/qgis/plugins/libarcgisfeatureserverprovider.so
/var/lib/dpkg/info/qgis-providers.md5sums-f3af7f7a302169ee3413d9dc5a7c8e88  usr/lib/qgis/plugins/libarcgismapserverprovider.so
/var/lib/dpkg/info/qgis-providers.md5sums-76b5faa93481a2461de3cb6d50e1f515  usr/lib/qgis/plugins/libbasicauthmethod.so
--
/var/lib/dpkg/info/qgis-providers.postinst-set -e
/var/lib/dpkg/info/qgis-providers.postinst-
/var/lib/dpkg/info/qgis-providers.postinst-if [ "$1" = "triggered" ] || [ "$1" = "configure" ]; then
/var/lib/dpkg/info/qgis-providers.postinst:	if [ -w /usr/share/qgis/resources/srs.db ] && [ -x /usr/lib/qgis/crssync ]; then
/var/lib/dpkg/info/qgis-providers.postinst:		/usr/lib/qgis/crssync
/var/lib/dpkg/info/qgis-providers.postinst-	fi
/var/lib/dpkg/info/qgis-providers.postinst-fi
/var/lib/dpkg/info/qgis-providers.postinst-
--
/var/lib/dpkg/info/qgis-providers.triggers:interest-noawait qgis-crssync
--
/var/lib/dpkg/info/qgis-providers.list-/usr
/var/lib/dpkg/info/qgis-providers.list-/usr/lib
/var/lib/dpkg/info/qgis-providers.list-/usr/lib/qgis
/var/lib/dpkg/info/qgis-providers.list:/usr/lib/qgis/crssync
/var/lib/dpkg/info/qgis-providers.list-/usr/lib/qgis/plugins
/var/lib/dpkg/info/qgis-providers.list-/usr/lib/qgis/plugins/libarcgisfeatureserverprovider.so
/var/lib/dpkg/info/qgis-providers.list-/usr/lib/qgis/plugins/libarcgismapserverprovider.so
--
/var/lib/dpkg/info/qgis-providers-common.postinst-#!/bin/sh
/var/lib/dpkg/info/qgis-providers-common.postinst-set -e
/var/lib/dpkg/info/qgis-providers-common.postinst-
/var/lib/dpkg/info/qgis-providers-common.postinst:if [ "$1" = "configure" ] && [ -x /usr/lib/qgis/crssync ]; then
/var/lib/dpkg/info/qgis-providers-common.postinst-	cp /usr/share/qgis/resources/srs-template.db /usr/share/qgis/resources/srs.db
/var/lib/dpkg/info/qgis-providers-common.postinst:	dpkg-trigger qgis-crssync
/var/lib/dpkg/info/qgis-providers-common.postinst-fi
/var/lib/dpkg/info/qgis-providers-common.postinst-
/var/lib/dpkg/info/qgis-providers-common.postinst-

$ grep -B3 -A1 qgis-providers /var/log/apt/history.log
Start-Date: 2021-08-23  01:05:16
Commandline: /usr/bin/unattended-upgrade
Install: libqgis-gui3.16.10:amd64 (3.16.10+dfsg-1, automatic), libqgis-app3.16.10:amd64 (3.16.10+dfsg-1, automatic), libqgispython3.16.10:amd64 (3.16.10+dfsg-1, automatic), libqgis-core3.16.10:amd64 (3.16.10+dfsg-1, automatic), libqgis-server3.16.10:amd64 (3.16.10+dfsg-1, automatic), libqgis-analysis3.16.10:amd64 (3.16.10+dfsg-1, automatic), libqgis-3d3.16.10:amd64 (3.16.10+dfsg-1, automatic), libqgis-native3.16.10:amd64 (3.16.10+dfsg-1, automatic)
Upgrade: qgis-common:amd64 (3.10.14+dfsg-1, 3.16.10+dfsg-1), python3-qgis:amd64 (3.10.14+dfsg-1, 3.16.10+dfsg-1), python3-qgis-common:amd64 (3.10.14+dfsg-1, 3.16.10+dfsg-1), qgis:amd64 (3.10.14+dfsg-1, 3.16.10+dfsg-1), libqgis-customwidgets:amd64 (3.10.14+dfsg-1, 3.16.10+dfsg-1), qgis-providers-common:amd64 (3.10.14+dfsg-1, 3.16.10+dfsg-1), qgis-providers:amd64 (3.10.14+dfsg-1, 3.16.10+dfsg-1)
End-Date: 2021-08-23  01:07:02

$ grep -C40 qgis-providers /var/log/apt/term.log
...
Log started: 2021-08-23  01:05:16
(Reading database ... 582863 files and directories currently installed.)
Preparing to unpack .../00-qgis-common_3.16.10+dfsg-1_all.deb ...
Unpacking qgis-common (3.16.10+dfsg-1) over (3.10.14+dfsg-1) ...
Preparing to unpack .../01-qgis_3.16.10+dfsg-1_amd64.deb ...
Unpacking qgis (3.16.10+dfsg-1) over (3.10.14+dfsg-1) ...
Preparing to unpack .../02-python3-qgis_3.16.10+dfsg-1_amd64.deb ...
Unpacking python3-qgis (3.16.10+dfsg-1) over (3.10.14+dfsg-1) ...
Preparing to unpack .../03-qgis-providers_3.16.10+dfsg-1_amd64.deb ...
Unpacking qgis-providers (3.16.10+dfsg-1) over (3.10.14+dfsg-1) ...
Preparing to unpack .../04-qgis-providers-common_3.16.10+dfsg-1_all.deb ...
Unpacking qgis-providers-common (3.16.10+dfsg-1) over (3.10.14+dfsg-1) ...
Selecting previously unselected package libqgis-core3.16.10.
Preparing to unpack .../05-libqgis-core3.16.10_3.16.10+dfsg-1_amd64.deb ...
Unpacking libqgis-core3.16.10 (3.16.10+dfsg-1) ...
Selecting previously unselected package libqgis-3d3.16.10.
Preparing to unpack .../06-libqgis-3d3.16.10_3.16.10+dfsg-1_amd64.deb ...
Unpacking libqgis-3d3.16.10 (3.16.10+dfsg-1) ...
Selecting previously unselected package libqgis-analysis3.16.10.
Preparing to unpack .../07-libqgis-analysis3.16.10_3.16.10+dfsg-1_amd64.deb ...
Unpacking libqgis-analysis3.16.10 (3.16.10+dfsg-1) ...
Selecting previously unselected package libqgis-native3.16.10.
Preparing to unpack .../08-libqgis-native3.16.10_3.16.10+dfsg-1_amd64.deb ...
Unpacking libqgis-native3.16.10 (3.16.10+dfsg-1) ...
Selecting previously unselected package libqgis-gui3.16.10.
Preparing to unpack .../09-libqgis-gui3.16.10_3.16.10+dfsg-1_amd64.deb ...
Unpacking libqgis-gui3.16.10 (3.16.10+dfsg-1) ...
Selecting previously unselected package libqgis-app3.16.10.
Preparing to unpack .../10-libqgis-app3.16.10_3.16.10+dfsg-1_amd64.deb ...
Unpacking libqgis-app3.16.10 (3.16.10+dfsg-1) ...
Preparing to unpack .../11-libqgis-customwidgets_3.16.10+dfsg-1_amd64.deb ...
Unpacking libqgis-customwidgets (3.16.10+dfsg-1) over (3.10.14+dfsg-1) ...
Preparing to unpack .../12-python3-qgis-common_3.16.10+dfsg-1_all.deb ...
Unpacking python3-qgis-common (3.16.10+dfsg-1) over (3.10.14+dfsg-1) ...
Selecting previously unselected package libqgispython3.16.10.
Preparing to unpack .../13-libqgispython3.16.10_3.16.10+dfsg-1_amd64.deb ...
Unpacking libqgispython3.16.10 (3.16.10+dfsg-1) ...
Selecting previously unselected package libqgis-server3.16.10.
Preparing to unpack .../14-libqgis-server3.16.10_3.16.10+dfsg-1_amd64.deb ...
Unpacking libqgis-server3.16.10 (3.16.10+dfsg-1) ...
Setting up qgis-providers-common (3.16.10+dfsg-1) ...
Setting up qgis-common (3.16.10+dfsg-1) ...
Setting up libqgis-native3.16.10 (3.16.10+dfsg-1) ...
Setting up libqgis-core3.16.10 (3.16.10+dfsg-1) ...
Setting up libqgis-3d3.16.10 (3.16.10+dfsg-1) ...
Setting up libqgis-gui3.16.10 (3.16.10+dfsg-1) ...
Setting up libqgis-analysis3.16.10 (3.16.10+dfsg-1) ...
Setting up libqgispython3.16.10 (3.16.10+dfsg-1) ...
Setting up libqgis-server3.16.10 (3.16.10+dfsg-1) ...
Setting up qgis-providers (3.16.10+dfsg-1) ...
Setting up libqgis-customwidgets (3.16.10+dfsg-1) ...
Setting up libqgis-app3.16.10 (3.16.10+dfsg-1) ...
Setting up python3-qgis-common (3.16.10+dfsg-1) ...
Setting up python3-qgis (3.16.10+dfsg-1) ...
Setting up qgis (3.16.10+dfsg-1) ...
Processing triggers for man-db (2.9.4-2) ...
Processing triggers for shared-mime-info (2.0-1) ...
Processing triggers for mailcap (3.69) ...
Processing triggers for desktop-file-utils (0.26-1) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for gnome-menus (3.36.0-1) ...
Processing triggers for libc-bin (2.31-13) ...
Log ended: 2021-08-23  01:07:02
...

-- System Information:
Debian Release: 11.0
  APT prefers testing-debug
  APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/8 CPU threads)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages qgis-providers depends on:
ii  dpkg                              1.20.9
ii  libc6                             2.31-13
ii  libexpat1                         2.2.10-2
ii  libgcc-s1                         10.2.1-6
ii  libgdal28                         3.2.2+dfsg-2
ii  libhdf5-103-1                     1.10.6+repack-5
ii  libnetcdf18                       1:4.7.4-1
ii  libpq5                            13.4-1
ii  libqca-qt5-2                      2.3.2-2
ii  libqca-qt5-2-plugins              2.3.2-2
ii  libqgis-core3.16.10               3.16.10+dfsg-1
ii  libqgis-gui3.16.10                3.16.10+dfsg-1
ii  libqscintilla2-qt5-15             2.11.6+dfsg-2
ii  libqt5core5a [qtbase-abi-5-15-2]  5.15.2+dfsg-10
ii  libqt5gui5                        5.15.2+dfsg-10
ii  libqt5network5                    5.15.2+dfsg-10
ii  libqt5sql5                        5.15.2+dfsg-10
ii  libqt5sql5-sqlite                 5.15.2+dfsg-10
ii  libqt5webkit5                     5.212.0~alpha4-11
ii  libqt5widgets5                    5.15.2+dfsg-10
ii  libqt5xml5                        5.15.2+dfsg-10
ii  libspatialindex6                  1.9.3-2
ii  libspatialite7                    5.0.1-2
ii  libsqlite3-0                      3.34.1-3
ii  libstdc++6                        10.2.1-6
ii  libxml2                           2.9.10+dfsg-6.7
ii  qgis-providers-common             3.16.10+dfsg-1
ii  qt5-image-formats-plugins         5.15.2-2

qgis-providers recommends no packages.

qgis-providers suggests no packages.

-- no debconf information

-- 
bye,
pabs

https://wiki.debian.org/PaulWise
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-grass-devel/attachments/20210823/948225de/attachment.sig>

More information about the Pkg-grass-devel mailing list