Debian Bug report logs - #495311
iceweasel silently fails if permissions on .mozilla are wrong

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Avery Fay <avery@shadypixel.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: iceweasel silently fails if permissions on .mozilla are wrong

Date: Sat, 16 Aug 2008 00:00:16 -0400

Package: iceweasel
Version: 3.0.1-1
Severity: important

I just installed Debian sid on my laptop and iceweasel simply would not
work. Starting from the menu would do nothing and starting from the
command line would silently fail. After strace the process, I found that
it couldn't read/write to the .mozilla directory. Sure enough the
directory was owned by root and the permissions were 600. I have no idea
how that happened as it's a new install. My best guess is that I ran
something with sudo that used the mozilla libraries before
actually trying to run iceweasel. The real problem though is that
iceweasel doesn't actually say why it fails; it just fails. Giving a
message like "permissions on profile directory wrong" or something would
be very useful.

Message #10 received at 495311@bugs.debian.org (full text, mbox, reply):

From: Kenshi Muto <kmuto@debian.org>

To: 495311@bugs.debian.org

Subject: Re: iceweasel silently fails if permissions on .mozilla are wrong

Date: Sun, 24 Aug 2008 17:14:57 +0900

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

reassign 495311 xulrunner-1.9
found 1.9.0.1-1
thanks

Hi,

I investigated this bug.

I noticed it made root:root $USER/.mozilla directory when a user did sudo
command and there wasn't $USER/.mozilla yet.

xulrunner-1.9's postinst calls:
 MOZILLA_NO_JEMALLOC=1 ./run-mozilla.sh run-mozilla.sh ./xpcshell -e ""

It makes $HOME/.mozilla directory.
When a user installs this package by using sudo, $HOME will be user's
home directory.

I believe specifying HOME value is needed on postinst, though I don't
know where the best is.

Thanks,
- -- 
Kenshi Muto
kmuto@debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.8+ <http://mailcrypt.sourceforge.net/>

iEYEARECAAYFAkixGHUACgkQQKW+7XLQPLH+4gCeIhNSrx/EzVyMaGqu0cgUxOPN
500AoIMl0lLp+DvA9JLGFIpcFUdvAZWr
=h+1b
-----END PGP SIGNATURE-----

Message #17 received at 495311@bugs.debian.org (full text, mbox, reply):

From: Amit Uttamchandani <auttamchandani@canoga.com>

To: 495311@bugs.debian.org

Subject: Similar issues in Lenny

Date: Tue, 16 Sep 2008 14:52:53 -0700

Package: iceweasel
State: installed
Automatically installed: no
Version: 3.0.1-1

I did a clean install of Debian Lenny and then installed KDE 4.1.1 using 
kde4.debian.net repo. Iceweasel was installed as well.

Iceweasel silenty quits and changing the ownership of .mozilla/ works.

Message #22 received at 495311@bugs.debian.org (full text, mbox, reply):

From: "Theppitak Karoonboonyanan" <thep@linux.thai.net>

To: 495311@bugs.debian.org

Subject: /tmp as $HOME ?

Date: Sat, 11 Oct 2008 10:40:48 +0700

Is it right to touch any user's $HOME on installation, albeit root?
How about using some temp dir as $HOME and clear it afterward?

For example,

TMPDIR=`mktemp -d`
HOME=$TMPDIR ./run-mozilla.sh run-mozilla.sh ./xpcshell -e "" || ...
rm -rf $TMPDIR

Regards,
-- 
Theppitak Karoonboonyanan
http://linux.thai.net/~thep/

Message #27 received at 495311@bugs.debian.org (full text, mbox, reply):

From: "Theppitak Karoonboonyanan" <thep@linux.thai.net>

To: 495311@bugs.debian.org

Cc: control@bugs.debian.org

Subject: Re: /tmp as $HOME ?

Date: Sat, 11 Oct 2008 11:00:54 +0700

[Message part 1 (text/plain, inline)]

package xulrunner-1.9
tags 495311 patch
thanks

On Sat, Oct 11, 2008 at 10:40 AM, Theppitak Karoonboonyanan
<thep@linux.thai.net> wrote:
> Is it right to touch any user's $HOME on installation, albeit root?
> How about using some temp dir as $HOME and clear it afterward?

Proposed patch against xulrunner1.9.postinst is attached. With this,
no .mozilla/ is left after postinst.

But it doesn't handle existing .mozilla/ with wrong permission yet,
though.

-- 
Theppitak Karoonboonyanan
http://linux.thai.net/~thep/

[xulrunner-1.9.postinst.patch (text/x-patch, attachment)]

Message #38 received at 495311-close@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <glandium@debian.org>

To: 495311-close@bugs.debian.org

Subject: Bug#495311: fixed in xulrunner 1.9.0.4-1

Date: Sat, 22 Nov 2008 14:02:25 +0000

Source: xulrunner
Source-Version: 1.9.0.4-1

We believe that the bug you reported is fixed in the latest version of
xulrunner, which is due to be installed in the Debian FTP archive:

libmozillainterfaces-java_1.9.0.4-1_all.deb
  to pool/main/x/xulrunner/libmozillainterfaces-java_1.9.0.4-1_all.deb
libmozjs-dev_1.9.0.4-1_amd64.deb
  to pool/main/x/xulrunner/libmozjs-dev_1.9.0.4-1_amd64.deb
libmozjs1d-dbg_1.9.0.4-1_amd64.deb
  to pool/main/x/xulrunner/libmozjs1d-dbg_1.9.0.4-1_amd64.deb
libmozjs1d_1.9.0.4-1_amd64.deb
  to pool/main/x/xulrunner/libmozjs1d_1.9.0.4-1_amd64.deb
python-xpcom_1.9.0.4-1_amd64.deb
  to pool/main/x/xulrunner/python-xpcom_1.9.0.4-1_amd64.deb
spidermonkey-bin_1.9.0.4-1_amd64.deb
  to pool/main/x/xulrunner/spidermonkey-bin_1.9.0.4-1_amd64.deb
xulrunner-1.9-dbg_1.9.0.4-1_amd64.deb
  to pool/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.4-1_amd64.deb
xulrunner-1.9-gnome-support_1.9.0.4-1_amd64.deb
  to pool/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.4-1_amd64.deb
xulrunner-1.9_1.9.0.4-1_amd64.deb
  to pool/main/x/xulrunner/xulrunner-1.9_1.9.0.4-1_amd64.deb
xulrunner-dev_1.9.0.4-1_amd64.deb
  to pool/main/x/xulrunner/xulrunner-dev_1.9.0.4-1_amd64.deb
xulrunner_1.9.0.4-1.diff.gz
  to pool/main/x/xulrunner/xulrunner_1.9.0.4-1.diff.gz
xulrunner_1.9.0.4-1.dsc
  to pool/main/x/xulrunner/xulrunner_1.9.0.4-1.dsc
xulrunner_1.9.0.4.orig.tar.gz
  to pool/main/x/xulrunner/xulrunner_1.9.0.4.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 495311@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mike Hommey <glandium@debian.org> (supplier of updated xulrunner package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sat, 22 Nov 2008 12:50:09 +0100
Source: xulrunner
Binary: xulrunner-1.9 xulrunner-1.9-gnome-support libmozjs1d libmozjs-dev libmozjs1d-dbg spidermonkey-bin xulrunner-dev xulrunner-1.9-dbg libmozillainterfaces-java python-xpcom
Architecture: source all amd64
Version: 1.9.0.4-1
Distribution: unstable
Urgency: low
Maintainer: Mike Hommey <glandium@debian.org>
Changed-By: Mike Hommey <glandium@debian.org>
Description: 
 libmozillainterfaces-java - XPCOM bindings for Java
 libmozjs-dev - Development files for the Mozilla SpiderMonkey JavaScript library
 libmozjs1d - The Mozilla SpiderMonkey JavaScript library
 libmozjs1d-dbg - Development files for the Mozilla SpiderMonkey JavaScript library
 python-xpcom - XPCOM bindings for Python
 spidermonkey-bin - standalone JavaScript/ECMAScript (ECMA-262) interpreter
 xulrunner-1.9 - XUL + XPCOM application runner
 xulrunner-1.9-dbg - Development files for the Gecko engine library
 xulrunner-1.9-gnome-support - Support for GNOME in xulrunner applications
 xulrunner-dev - Development files for the Gecko engine library
Closes: 482415 486334 486354 491144 492488 495311 496626 501476
Changes: 
 xulrunner (1.9.0.4-1) unstable; urgency=low
 .
   * New upstream release.
   * Fixes mfsa-2008-{47,51-58}, also known as
     CVE-2008-0017, CVE-2008-4582, CVE-2008-5015, CVE-2008-5016,
     CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021,
     CVE-2008-5022, CVE-2008-5023, CVE-2008-5024.
   * debian/postinst.in: Use a temporary directory as $HOME when running
     xpcshell. Thanks Theppitak Karoonboonyanan. Closes: #495311.
   * debian/rules:
     + Exclude jemalloc from kfreebsd packages, as it is not built.
       Thanks Petr Salinger. Closes: #501476.
     + Use LDFLAGS instead of CFLAGS to set -Wl,--no-relax on alpha.
   * modules/libpr0n/src/imgRequest.cpp: Apply patch from bz#373701 to
     properly close streaming HTTP connections and avoid sucking bandwidth.
     Closes: #491144.
   * browser/app/mozilla.in: Do exec instead of uselessly forking.
     Closes: #496626.
   * memory/jemalloc/jemalloc.c: Apply patch from bz#460933 to avoid
     possible deadlock on fork with jemalloc enabled.
   * xpcom/glue/nsThreadUtils.cpp: Better fix to avoid crashes such as bug
     #481925. Might fix bug #503926, too.
   * debian/xulrunner-1.9.preinst: If /usr/lib/xulrunner-1.9/chrome is an
     empty directory, remove it. This will allow dpkg to create the symbolic
     link correctly. Closes: #482415, #486334, #486354, #492488.
   * toolkit/components/url-classifier/src/Makefile.in: Disable optimization
     on alpha as it leads to crashes when using this component.
   * uriloader/exthandler/nsMIMEInfoImpl.h,
     uriloader/exthandler/unix/nsMIMEInfoUnix.cpp,
     uriloader/exthandler/unix/nsOSHelperAppService.cpp,
     uriloader/exthandler/unix/nsOSHelperAppService.h: Revert change from
     release 1.9.0.1-1.
   * uriloader/exthandler/unix/nsMIMEInfoUnix.cpp: Properly launch
     applications set in $HOME/.mailcap. Replaces the previous patch in
     a much simpler way.
Checksums-Sha1: 
 07083eb6d21e33286a8a1c13645ff8be35cfd2d7 1753 xulrunner_1.9.0.4-1.dsc
 0e20deeec3c1dc469e028a9eb60940ced0d27e48 43490007 xulrunner_1.9.0.4.orig.tar.gz
 6f833a10b5efeabb4a45a8358f5ad24df2cdda05 115497 xulrunner_1.9.0.4-1.diff.gz
 5fc478d64e55f8fc7ded0b0421ad9d2167302e09 1479076 libmozillainterfaces-java_1.9.0.4-1_all.deb
 c43129ea59cb77f93bc8e43e5c49830c1f595733 7716482 xulrunner-1.9_1.9.0.4-1_amd64.deb
 340853c68763748a71195695abbea3800d7dcfe0 100622 xulrunner-1.9-gnome-support_1.9.0.4-1_amd64.deb
 6ffbfad265a9172191aa864f78561af30fbf7dc3 372118 libmozjs1d_1.9.0.4-1_amd64.deb
 9363a5c6e4b2e77f77493a8dbfd303088c444456 222562 libmozjs-dev_1.9.0.4-1_amd64.deb
 6a9ca6a8cae5a6ef68af4a3f1ebc77bc08b6934a 884332 libmozjs1d-dbg_1.9.0.4-1_amd64.deb
 d38874a38e159acb31d110c86e9324f0e13683c4 69246 spidermonkey-bin_1.9.0.4-1_amd64.deb
 a9a864562a48fc62690b3574cdf84f756308585f 3583620 xulrunner-dev_1.9.0.4-1_amd64.deb
 d40d879434bbc35468cf77b39eba3a9e0f611170 49963390 xulrunner-1.9-dbg_1.9.0.4-1_amd64.deb
 e79ed7eb241248da9a835230cea6736476070ed3 150428 python-xpcom_1.9.0.4-1_amd64.deb
Checksums-Sha256: 
 bf3f69bd1f7bd30da00cb3b5dcf4523b866f186dc9ba32324704e3c39b74d687 1753 xulrunner_1.9.0.4-1.dsc
 81a32d621a2110a40453f355e9ac4256c5576d3a455c503d990501ff038f9262 43490007 xulrunner_1.9.0.4.orig.tar.gz
 d25ec4a63d8b92d21b2f0a133b1bbe70f07ec4f4a3a90245fd87154828f2c58b 115497 xulrunner_1.9.0.4-1.diff.gz
 3bb313836fd1b6d4d30391f42b93e8d8507052e8886d766b8a155cd90916cb86 1479076 libmozillainterfaces-java_1.9.0.4-1_all.deb
 a2ac861649e43c7ef123c59f03311c83d6adcd7c4a9923ef2b7997ca4870709b 7716482 xulrunner-1.9_1.9.0.4-1_amd64.deb
 028408afd23140b1b69e554bd89a3b7ec187ef585ea0db6702ece2f16094e97a 100622 xulrunner-1.9-gnome-support_1.9.0.4-1_amd64.deb
 37aa0b06caae6f2297e2636ad2462facd17543742cb3cbd4d6d40dcc7555983a 372118 libmozjs1d_1.9.0.4-1_amd64.deb
 16fc30aa6d78cbef501df950008f329eb06a2115522bef3d73151a032b61f9b3 222562 libmozjs-dev_1.9.0.4-1_amd64.deb
 01d40a793849368ca0c9e2b69cfb35d1f9ca18bec2ef0b122ec3f3416958c0ae 884332 libmozjs1d-dbg_1.9.0.4-1_amd64.deb
 1891770c0feefda4e67cf59c800cc96d3c3bdb8532a374d6adb89717fd56ee81 69246 spidermonkey-bin_1.9.0.4-1_amd64.deb
 e5200ac6071ff1b702c3248d78f83955d22952f35c3baf1369936631ade0fa4e 3583620 xulrunner-dev_1.9.0.4-1_amd64.deb
 44d9f5074149538212e62dd86168709b100a72d3411139171ef84189247d204e 49963390 xulrunner-1.9-dbg_1.9.0.4-1_amd64.deb
 e7d787ce3f4ded48782a190fbe01e14957efed638e8af0cc64159ad2b5779822 150428 python-xpcom_1.9.0.4-1_amd64.deb
Files: 
 b9cd463cb0f7ce51d740654737e58923 1753 devel optional xulrunner_1.9.0.4-1.dsc
 ee064c069d4310e404c3c1054de531b9 43490007 devel optional xulrunner_1.9.0.4.orig.tar.gz
 207dae4bc806f3fafcf9ee0633dfaec5 115497 devel optional xulrunner_1.9.0.4-1.diff.gz
 271e0431625b5ce94602e1844ee4a788 1479076 libdevel extra libmozillainterfaces-java_1.9.0.4-1_all.deb
 77698e752b66338474d31c462ebe54c6 7716482 devel optional xulrunner-1.9_1.9.0.4-1_amd64.deb
 fdda2f394e0a72c37154a6ffdef5149e 100622 devel optional xulrunner-1.9-gnome-support_1.9.0.4-1_amd64.deb
 0c2fc128cfa3bb456c42ef59216e2851 372118 libs optional libmozjs1d_1.9.0.4-1_amd64.deb
 ce35bef45348ab1a00744b5b28eb9a78 222562 libdevel optional libmozjs-dev_1.9.0.4-1_amd64.deb
 7ebc4a6c3bd3e365d94debea8590ec48 884332 libdevel extra libmozjs1d-dbg_1.9.0.4-1_amd64.deb
 9dd9266e399b851cb616b29d555f6716 69246 interpreters optional spidermonkey-bin_1.9.0.4-1_amd64.deb
 3c5b408e22a274c5f2191abaec511c2d 3583620 libdevel optional xulrunner-dev_1.9.0.4-1_amd64.deb
 eb2e3b5cdb920c047b1d37acd54fbee9 49963390 libdevel extra xulrunner-1.9-dbg_1.9.0.4-1_amd64.deb
 763192e04ee9272fbf40369d3cea361c 150428 python extra python-xpcom_1.9.0.4-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFJKAgG3kvaLFT9KlgRAqqJAJ9zGPMzrttiaO3//hnc8vyeInP0YwCeOzed
VqI9tyaDiw6kb+4WFGX8zHA=
=S3ev
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.