Bug#981647: libgnupg-interface-perl 1.01 breaks ssh-agent msva-perl ...

[Dominic Hargreaves]

On Tue, Feb 02, 2021 at 10:09:45AM -0500, Aaron M. Ucko wrote:
> Package: libgnupg-interface-perl
> Version: 1.01-1
> Severity: important
> Tags: upstream
> X-Debbugs-Cc: msva-perl at packages.debian.org
> Control: affects -1 msva-perl
> 
> [Copying msva-perl maintainers.]
> 
> My X session normally boils down to
> 
> exec /usr/bin/ssh-agent /usr/bin/monkeysphere-validation-agent /usr/bin/im-launch x-session-manager
> 
> where /usr/bin/monkeysphere-validation-agent resolves (via the
> alternatives system) to /usr/bin/msva-perl.  With this setup,
> libgnupg-interface-perl 1.01 attempts to run gpg with no PATH and
> bails because it couldn't find an acceptable version of gpg, thereby
> immediately crashing msva-perl and my entire X session.
> 
> I'm not entirely sure what triggers the PATH-clearing here, perhaps
> the fact that ssh-agent is setgid ssh.  Regardless, I'd suggest
> setting a sane PATH that includes at minimum /bin and /usr/bin rather
> than clearing PATH entirely.  (Explicitly running /usr/bin/gpg might
> also work.)
> 
> Could you please take a look?

As a hunch, I changed the default from 'gpg' to '/usr/bin/gpg'.
Could you install this on your system and confirm whether it fixes
the problem?

https://salsa.debian.org/perl-team/modules/packages/libgnupg-interface-perl/-/tree/hardcode-gpg-path

Cheers
Dominic