Bug#969006: systemd-run has faulty path expansion that will find directories instead of programs

[William Herrin]

Package: systemd
Version: 241-7~deb10u4
Severity: normal
Tags: upstream

Dear Maintainer,

{iolo.udic.org:herrin:/home/herrin:!} echo $PATH
/home/herrin:/usr/bin:/sbin:/usr/sbin:/usr/lib:/bin:/usr/local/bin

{iolo.udic.org:herrin:/home/herrin:!} systemd-run --scope --user echo stuff
Running scope as unit: run-r6a38909438ac4ec28babc2cafba48965.scope
stuff

{iolo.udic.org:herrin:/home/herrin:!} mkdir echo

{iolo.udic.org:herrin:/home/herrin:!} systemd-run --scope --user echo stuff
Running scope as unit: run-r2a3872adfffa447f8b6b8aeed6fcf9a9.scope
Failed to execute: Permission denied


Aug 25 13:43:07 iolo systemd[24566]: Started /bin/echo stuff.
Aug 25 13:43:07 iolo systemd[24566]: run-r6a38909438ac4ec28babc2cafba48965.scope: Succeeded.
Aug 25 13:44:00 iolo systemd[24566]: Started /home/herrin/echo stuff.
Aug 25 13:44:00 iolo systemd[24566]: run-r2a3872adfffa447f8b6b8aeed6fcf9a9.scope: Succeeded.



*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- Package-specific info:

-- System Information:
Debian Release: 10.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.141-deb10 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages systemd depends on:
ii  adduser          3.118
ii  libacl1          2.2.53-4
ii  libapparmor1     2.13.2-10
ii  libaudit1        1:2.8.4-3
ii  libblkid1        2.33.1-0.1
ii  libc6            2.28-10
ii  libcap2          1:2.25-2
ii  libcryptsetup12  2:2.1.0-5+deb10u2
ii  libgcrypt20      1.8.4-5
ii  libgnutls30      3.6.7-4+deb10u5
ii  libgpg-error0    1.35-1
ii  libidn11         1.33-2.2
ii  libip4tc0        1.8.2-4
ii  libkmod2         26-1
ii  liblz4-1         1.8.3-1
ii  liblzma5         5.2.4-1
ii  libmount1        2.33.1-0.1
ii  libpam0g         1.3.1-5
ii  libseccomp2      2.3.3-4
ii  libselinux1      2.8-1+b1
ii  libsystemd0      241-7~deb10u4
ii  mount            2.33.1-0.1
ii  util-linux       2.33.1-0.1

Versions of packages systemd recommends:
ii  dbus            1.12.20-0+deb10u1
ii  libpam-systemd  241-7~deb10u4

Versions of packages systemd suggests:
ii  policykit-1        0.105-25
pn  systemd-container  <none>

Versions of packages systemd is related to:
pn  dracut           <none>
ii  initramfs-tools  0.133+deb10u1
ii  udev             241-7~deb10u4

-- Configuration Files:
/etc/systemd/system.conf changed [not included]

-- no debconf information