Documenting the FTBFS issues 1. `pasted-back-cuted-lines` fails to work with rust-coreutils < 0.5.0 due to missing `-n` argument in the cut CLI. This will be fixed in the 0.5.0 rust-coreutils upload.
2. rust-coreutils has a security policy which disallows running executables by a different name. This leads to "start-stop-daemon with both -x and -a" to fail as it attempts to run /bin/false under a different name. The test states that argv[0] is not currently tested for correctness. this manifests as this failure: echo -ne '' | start-stop-daemon -S -x /bin/false -a qwerty false 2>&1; echo $? FAIL: start-stop-daemon with both -x and -a --- expected +++ actual @@ -1 +1,3 @@ +Security violation: Requested utility `qwerty` does not match executable name: + /usr/lib/cargo/bin/coreutils/false 1 From a "get it working" standpoint, i'll introduce a patch - 'start-stop-daemon -S -x /bin/false -a qwerty false 2>&1; echo $?' \ + 'start-stop-daemon -S -x /bin/false -a false false 2>&1; echo $?' \ it's not great, but the test doesn't check argv[0] correctness. its about testing the CLI executes and the return is the one expected (in this case ret code 1) * build failure due to config/pkg/initramfs missing the new Traversal CVE patch. I've add a config that's ignoring it so i'll get someone from security + likely dbungert (as the person that did the initramfs split) to review that, and tell me if it needs turned on -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2130136 Title: Merge busybox from Debian Unstable for resolute To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/busybox/+bug/2130136/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
