Package: slim Version: 1.3.6-4 Severity: normal
Dear Maintainer,
slim leaks a read-write open file descriptor (/var/log/slim.log) to
child processes. I discovered it by running 'pvcreate':
nicolas@deb:~$ pvcreate
File descriptor 3 (/var/log/slim.log) leaked on pvcreate invocation.
Parent PID 4446: bash
Thus, also my window-manager (i3) and all bashs started within to have
this descriptor open; modification is easily possible:
nicolas@deb:~$ readlink -v /proc/$(pidof i3)/fd/3
/var/log/slim.log
nicolas@deb:~$ pidof bash | tr " " "\n" | xargs -n1 -IPID readlink
/proc/PID/fd/3
/var/log/slim.log
/var/log/slim.log
/var/log/slim.log
/var/log/slim.log
nicolas@deb:~$ echo bla >&3
nicolas@deb:~$ cp /proc/$$/fd/3 /tmp/fd3 && cat /tmp/fd3
slim: waiting for X server to shut down.
slim: waiting for X server to begin accepting connections.
slim: waiting for X server to shut down
slim: waiting for X server to begin accepting connections.
..
bla
nicolas@deb:~$
Kind regards,
Nicolas
-- System Information:
Debian Release: stretch/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'oldstable-updates'), (500,
'oldoldstable'), (500, 'unstable'), (500, 'stable'), (500, 'oldstable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armel
Kernel: Linux 4.3.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=nb:nn:dk:se:de:en:C, LC_CTYPE=nb:nn:dk:se:de:en:C (charmap=UTF-8)
(ignored: LC_ALL set to nb_NO.UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
Versions of packages slim depends on:
ii dbus 1.10.6-1
ii debconf [debconf-2.0] 1.5.58
ii libc6 2.21-9
ii libfontconfig1 2.11.0-6.3
ii libfreetype6 2.6.3-3
ii libgcc1 1:5.3.1-10
ii libjpeg62-turbo 1:1.4.2-2
ii libpam0g 1.1.8-3.2
ii libpng12-0 1.2.54-4
ii libstdc++6 5.3.1-10
ii libx11-6 2:1.6.3-1
ii libxext6 2:1.3.3-1
ii libxft2 2.3.2-1
ii libxmu6 2:1.1.2-2
ii libxrandr2 2:1.5.0-1
ii libxrender1 1:0.9.9-2
ii zlib1g 1:1.2.8.dfsg-2+b1
Versions of packages slim recommends:
ii xterm 322-1
Versions of packages slim suggests:
ii scrot 0.8-17
ii xauth 1:1.0.9-1
-- Configuration Files:
/etc/slim.conf changed [not included]
-- debconf information excluded
--
Nicolas Schier
Tel: +49 30 39976-790
Fax: +49 30 39976-255
Mail: [email protected]
https://avm.de/
AVM Audiovisuelles Marketing und Computersysteme GmbH, Alt-Moabit 95, 10559
Berlin
HRB 23075 AG Charlottenburg, Geschäftsführer: Johannes Nill
signature.asc
Description: Digital signature
