On 2022-01-18 09:26 +0000, Chris Lamb wrote:
> Source: ncurses
> Version: 6.3-2
> Severity: wishlist
> Tags: patch
> User: [email protected]
> Usertags: umask
> X-Debbugs-Cc: [email protected]
>
> Hi,
>
> Whilst working on the Reproducible Builds effort [0] we noticed that
> ncurses could not be built reproducibly.
Thanks. I should have noticed that from the failing reprotest in the
Salsa CI, but did not look closely and thought that it would be due to a
different problem that has shown up on i386 since ncurses 6.3-1.
> This is because the README.gz file will retain its group-writeable bit
> due to the use of dh_fixperms -Xfoo, and will thus vary when the package
> is built with a different umask:
>
> --rw-r--r-- 0 root (0) root (0) 7937 2021-03-07
> 00:08:58.000000 ./usr/libexec/ncurses-examples/README.gz
> +-rw-rw-r-- 0 root (0) root (0) 7937 2021-03-07
> 00:08:58.000000 ./usr/libexec/ncurses-examples/README.gz
>
> Patch attached that removes this bit manually, but feel free to go with a
> different solution, of course.
> --- a/debian/rules 2022-01-18 08:47:42.277389249 +0000
> --- b/debian/rules 2022-01-18 09:03:30.547729907 +0000
> @@ -508,6 +508,7 @@
> dh_compress -p$(package-examples) usr/libexec/ncurses-examples/README
> dh_compress -a -N$(package-examples)
> dh_fixperms -a -Xusr/libexec/ncurses-examples/README
> + chmod g-w debian/ncurses-examples/usr/libexec/ncurses-examples/README.gz
That works with umask 002, but in fact the file could have any
permissions from 000 to 666, depending on the umask used when the source
was unpacked.
I have installed a different fix, and now the reprotest succeeds
again[1].
Cheers,
Sven
1. https://salsa.debian.org/debian/ncurses/-/pipelines/339074