Your message dated Thu, 02 Jan 2020 18:05:20 +0000
with message-id <[email protected]>
and subject line Bug#945490: fixed in pstoedit 3.75-1
has caused the Debian Bug report #945490,
regarding gs always fails with "Permission denied"
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
945490: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945490
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: pstoedit
Version: 3.74-1+b1
Severity: important

Tried pstoedit for the first time today, but I couldn't get it to work.
After a few tests, I noticed it would fail to run even when converting a
dummy pdf (saved with inkscape) to a ps.

The following command:

$ pstoedit lay1.pdf lay1.ps

Results in
===================
pstoedit: version 3.74 / DLL interface 108 (built: Aug 24 2019 - release build 
- g++ 9.2.1 20190821 - 64-bit) : Copyright (C) 1993 - 2019 Wolfgang Glunz
No explicit output format specified - using plot-ps as derived from suffix of 
output file

*** WARNING - you have selected SAFER, indicating you want Ghostscript
              to execute in a safer environment, but at the same time
              have selected DELAYBIND. Unless you use this option with
              care (and specifically, remember to call .bindnow) it is
              possible that malicious code may be able to evade the
              limited security offered by the SAFER option.

*** WARNING - you have selected SAFER, indicating you want Ghostscript
              to execute in a safer environment, but at the same time
              have selected WRITESYSTEMDICT. Unless you use this option with
              care and specifically, remember to execute code like:
                     "systemdict readonly pop"
              it is possible that malicious code may be able to evade the
              limited security offered by the SAFER option.
Error: /invalidfileaccess in --run--
Operand stack:
  (lay1.pdf)   (r)
Execution stack:
  %interp_exit   .runexec2   --nostringval--   run   --nostringval--   2   
%stopped_push   --nostringval--   run   run   false   1   %stopped_push   1989  
 1   3   %oparray_pop   1988   1   3   %oparray_pop   1976   1   3   
%oparray_pop   1833   1   3   %oparray_pop   --nostringval--   %errorexec_pop   
.runexec2   --nostringval--   run   --nostringval--   2   %stopped_push   
--nostringval--   1989   1   3   %oparray_pop   run
Dictionary stack:
  --dict:730/1684(ro)(G)--   --dict:0/20(G)--   --dict:303/450(L)--
Current allocation mode is local
Last OS error: Permission denied
Current file position is 89272
GPL Ghostscript 9.50: Unrecoverable error, exit code 1
PostScript/PDF Interpreter finished. Return status 256 executed command : gs -q 
-dDELAYBIND -dWRITESYSTEMDICT -dNODISPLAY -dNOEPS "/tmp/psinD1zLI9"
The interpreter seems to have failed, cannot proceed !
===================

"lay1.ps" is created as zero file.
It seems that gs doesn't have enough permissions to read the input (?).

I cannot it to run even using stdin/out only.

But if I explicitly disable gs "SAFER" with

$ pstoedit -psarg '-dNOSAFER' in out

then I can convert documents as expected.

I'm filing this as important, since I don't think explicitly disabling
the gs sandbox is the right fix.

-- System Information:
Debian Release: bullseye/sid
 APT prefers unstable
 APT policy: (900, 'unstable'), (800, 'experimental'), (500, 'unstable-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.2.0-3-rt-amd64 (SMP w/8 CPU cores; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages pstoedit depends on:
ii  ghostscript      9.50~dfsg-2
ii  libc6            2.29-3
ii  libpstoedit0c2a  3.74-1+b1
ii  libstdc++6       9.2.1-19

pstoedit recommends no packages.

Versions of packages pstoedit suggests:
pn  xfig | ivtools-bin | tgif | transfig  <none>

--- End Message ---
--- Begin Message ---
Source: pstoedit
Source-Version: 3.75-1

We believe that the bug you reported is fixed in the latest version of
pstoedit, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Barak A. Pearlmutter <[email protected]> (supplier of updated pstoedit package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 02 Jan 2020 17:40:26 +0000
Source: pstoedit
Architecture: source
Version: 3.75-1
Distribution: unstable
Urgency: medium
Maintainer: Barak A. Pearlmutter <[email protected]>
Changed-By: Barak A. Pearlmutter <[email protected]>
Closes: 945490
Changes:
 pstoedit (3.75-1) unstable; urgency=medium
 .
   * new upstream version (closes: #945490)
   * bump policy version
   * build dependency for pdflatex support files
   * multiarch support
   * add rules-requires-root control field
Checksums-Sha1:
 243f93b3232fd796e58baefc535c339d28bb3d92 2324 pstoedit_3.75-1.dsc
 6cff777bef10e303aeef19e35d790bc55effb746 949980 pstoedit_3.75.orig.tar.xz
 27644869d128ea339ae4d4acefce053a185a8d49 10292 pstoedit_3.75-1.debian.tar.xz
 70d60230a6fd85ead06d2aefe2d33cbe58bf7bcf 9056 pstoedit_3.75-1_source.buildinfo
Checksums-Sha256:
 02d301408a87a468b5f377871f681b1f17b2b20d81152c199d88ddaeb555cffc 2324 
pstoedit_3.75-1.dsc
 837334e6d3c43252a317a317b84fb5c288dfd791288f8ca1deaaa3370bf55de9 949980 
pstoedit_3.75.orig.tar.xz
 357db5679761d5e1ce624ec8c1bf8bedb9a7e0730e62a05cd8de89590f08766c 10292 
pstoedit_3.75-1.debian.tar.xz
 51ba5abc0c4dee20406097189964006a42cb3e30390166787e079d80b6fb21f1 9056 
pstoedit_3.75-1_source.buildinfo
Files:
 66b583f40ee08f82adaa8b9a5d76eecd 2324 graphics optional pstoedit_3.75-1.dsc
 f870ea94e9339cb2fe679d60be264f0e 949980 graphics optional 
pstoedit_3.75.orig.tar.xz
 7a2a62c4eb98b9d4cd578804795a9605 10292 graphics optional 
pstoedit_3.75-1.debian.tar.xz
 a9c93161b037e4a0fec812b135159a5f 9056 graphics optional 
pstoedit_3.75-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Bcr7
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to