Processed: Re: Bug#891063: emacs25: dconf-CRITICAL errors

[Debian Bug Tracking System]

Processing control commands:

> tags -1 security
Bug #891063 [emacs25] emacs25: dconf-CRITICAL errors
Added tag(s) security.

-- 
891063: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891063
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#891063: emacs25: dconf-CRITICAL errors

[Vincent Lefevre]

Control: tags -1 security

On 2018-02-21 22:41:53 -0800, Rob Browning wrote:
> I'm not sure I understand yet how this makes Emacs unusable -- does it
> warn or crash?

I've looked at it more closely, and the problem seems to come from
that when Emacs is run as root after "su" (without using -m or -p),
it still tries to use the user's config and modify things there!
In particular, it can be tricked by the user to create a file
anywhere, like this:

-rw--- 1 root root 2 2018-02-22 12:26:14 /created-by-emacs

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Bug#891063: emacs25: dconf-CRITICAL errors

[Vincent Lefevre]

On 2018-02-21 22:41:53 -0800, Rob Browning wrote:
> Vincent Lefevre  writes:
> 
> > Package: emacs25
> > Version: 25.2+1-6+b1
> > Severity: grave
> > Justification: renders package unusable
> 
> I'm not sure I understand yet how this makes Emacs unusable -- does it
> warn or crash?

Well, there are critical errors. So this must be really important.
I'm wondering whether this may cause data corruption.

Moreover, each time I start emacs, it takes 24 lines of the terminal
due to these errors, hiding important information.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Bug#891063: emacs25: dconf-CRITICAL errors

[Rob Browning]

Vincent Lefevre  writes:

> Package: emacs25
> Version: 25.2+1-6+b1
> Severity: grave
> Justification: renders package unusable

I'm not sure I understand yet how this makes Emacs unusable -- does it
warn or crash?

Thanks
-- 
Rob Browning
rlb @defaultvalue.org and @debian.org
GPG as of 2011-07-10 E6A9 DA3C C9FD 1FF8 C676 D2C4 C0F0 39E9 ED1B 597A
GPG as of 2002-11-03 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4

Bug#891063: emacs25: dconf-CRITICAL errors

[Vincent Lefevre]

Package: emacs25
Version: 25.2+1-6+b1
Severity: grave
Justification: renders package unusable

After the latest kernel upgrade, I now get the errors when starting
emacs:

(emacs:8958): dconf-CRITICAL **: unable to create file 
'/run/user/1000/dconf/user': Permission denied.  dconf will not work properly.

(emacs:8958): dconf-CRITICAL **: unable to create file 
'/run/user/1000/dconf/user': Permission denied.  dconf will not work properly.

(emacs:8958): dconf-CRITICAL **: unable to create file 
'/run/user/1000/dconf/user': Permission denied.  dconf will not work properly.

(emacs:8958): dconf-CRITICAL **: unable to create file 
'/run/user/1000/dconf/user': Permission denied.  dconf will not work properly.

(emacs:8958): dconf-CRITICAL **: unable to create file 
'/run/user/1000/dconf/user': Permission denied.  dconf will not work properly.

(emacs:8958): dconf-CRITICAL **: unable to create file 
'/run/user/1000/dconf/user': Permission denied.  dconf will not work properly.

(emacs:8958): dconf-CRITICAL **: unable to create file 
'/run/user/1000/dconf/user': Permission denied.  dconf will not work properly.

(emacs:8958): dconf-CRITICAL **: unable to create file 
'/run/user/1000/dconf/user': Permission denied.  dconf will not work properly.

This is extremely annoying.

zira:~> ll /run/user/1000
total 0
srw-rw-rw- 1 vinc17 vinc17   0 2018-02-22 04:02:21 bus=
drwx-- 3 vinc17 vinc17  60 2018-02-22 04:02:21 dbus-1/
drwx-- 2 root   root60 2018-02-22 04:02:32 dconf/
drwx-- 2 vinc17 vinc17 140 2018-02-22 04:02:21 gnupg/
drwx-- 2 vinc17 vinc17  40 2018-02-22 04:03:28 gvfs/
drwx-- 2 vinc17 vinc17  80 2018-02-22 04:02:21 pulse/
drwxr-xr-x 2 vinc17 vinc17  80 2018-02-22 04:02:21 systemd/

The owner and/or permissions for dconf seem really wrong.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 
'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.15.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=POSIX 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages emacs25 depends on:
ii  emacs25-bin-common 25.2+1-6+b1
ii  libacl12.2.52-3+b1
ii  libasound2 1.1.3-5
ii  libatk1.0-02.26.1-3
ii  libc6  2.26-6
ii  libcairo-gobject2  1.14.10-1
ii  libcairo2  1.14.10-1
ii  libdbus-1-31.12.4-1
ii  libfontconfig1 2.12.6-0.1
ii  libfreetype6   2.6.3-3.2
ii  libgdk-pixbuf2.0-0 2.36.11-1
ii  libgif75.1.4-2
ii  libglib2.0-0   2.54.3-2
ii  libgnutls303.5.18-1
ii  libgomp1   8-20180218-1
ii  libgpm21.20.7-5
ii  libgtk-3-0 3.22.28-1
ii  libice62:1.0.9-2
ii  libjpeg62-turbo1:1.5.2-2+b1
ii  libm17n-0  1.7.0-3+b2
ii  libmagickcore-6.q16-5  8:6.9.9.34+dfsg-3
ii  libmagickwand-6.q16-5  8:6.9.9.34+dfsg-3
ii  libotf00.9.13-3+b1
ii  libpango-1.0-0 1.40.14-1
ii  libpangocairo-1.0-01.40.14-1
ii  libpng16-161.6.34-1
ii  librsvg2-2 2.40.20-2
ii  libselinux12.7-2+b1
ii  libsm6 2:1.2.2-1+b3
ii  libtiff5   4.0.9-4
ii  libtinfo5  6.1-1
ii  libx11-6   2:1.6.4-3
ii  libx11-xcb12:1.6.4-3
ii  libxcb11.12-1
ii  libxfixes3 1:5.0.3-1
ii  libxft22.3.2-1+b2
ii  libxinerama1   2:1.1.3-1+b3
ii  libxml22.9.4+dfsg1-6.1
ii  libxpm41:3.5.12-1
ii  libxrandr2 2:1.5.1-1
ii  libxrender11:0.9.10-1
ii  zlib1g 1:1.2.8.dfsg-5

emacs25 recommends no packages.

Versions of packages emacs25 suggests:
ii  emacs25-common-non-dfsg  25.2+1-1

-- no debconf information