Debian Bug report logs - #977747
nis: reproducible builds: Embeds BASH value in /usr/lib/yp/pwupdate

version graph

Package: src:nis; Maintainer for src:nis is Francesco Paolo Lovergine <frankie@debian.org>;

Reported by: Vagrant Cascadian <vagrant@reproducible-builds.org>

Date: Sun, 20 Dec 2020 04:15:02 UTC

Severity: normal

Tags: patch

Fixed in version nis/3.17.1-6

Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian QA Group <packages@qa.debian.org>:
Bug#977747; Package src:nis. (Sun, 20 Dec 2020 04:15:03 GMT) (full text, mbox, link).


Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian QA Group <packages@qa.debian.org>. (Sun, 20 Dec 2020 04:15:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: submit@bugs.debian.org
Subject: nis: reproducible builds: Embeds BASH value in /usr/lib/yp/pwupdate
Date: Sat, 19 Dec 2020 20:12:39 -0800
[Message part 1 (text/plain, inline)]
Source: nis
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: shell
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The shell used for the #! in /usr/lib/yp/pwupdate depends upon the
running user's shell.

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/nis.html

  #!/bin/bash
  vs.
  #!/bin/sh


The attached patch fixes this by passing BASH=/bin/bash to the
appropriate configure script.


live well,
  vagrant
[0002-debian-rules-Pass-BASH-bin-bash-to-the-ypserv-config.patch (text/x-diff, inline)]
From eaf81058ec8a715b4b162f115c13315118ad970d Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sun, 20 Dec 2020 03:55:40 +0000
Subject: [PATCH 2/2] debian/rules: Pass BASH=/bin/bash to the ypserv configure
 script.

In ypserv-2.19/configure, the BASH variable gets set to /bin/sh if
unset. This leads to reproducibility issues in the
/usr/lib/yp/pwupdate command which uses the value of BASH for the #!
line.
---
 debian/rules | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian/rules b/debian/rules
index 4c74d96..59dd4d4 100755
--- a/debian/rules
+++ b/debian/rules
@@ -53,6 +53,7 @@ build:
 	rm -f $(YPSERV)/sedscript
 	-(cd $(YPSERV) && [ ! -f config.status ] && \
 		AWK=/usr/bin/awk CFLAGS=$(CFLAGS) ./configure \
+		BASH=/bin/bash \
 		--prefix=/usr --mandir=/usr/share/man \
 		--sysconfdir=/etc \
 		--libexecdir=/usr/lib/yp --enable-checkroot \
-- 
2.20.1

[signature.asc (application/pgp-signature, inline)]

Reply sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
You have taken responsibility. (Sun, 20 Dec 2020 05:36:04 GMT) (full text, mbox, link).


Notification sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug acknowledged by developer. (Sun, 20 Dec 2020 05:36:04 GMT) (full text, mbox, link).


Message #10 received at 977747-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 977747-close@bugs.debian.org
Subject: Bug#977747: fixed in nis 3.17.1-6
Date: Sun, 20 Dec 2020 05:33:30 +0000
Source: nis
Source-Version: 3.17.1-6
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
nis, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 977747@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated nis package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 19 Dec 2020 21:12:31 -0800
Source: nis
Architecture: source
Version: 3.17.1-6
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 787126 977747
Changes:
 nis (3.17.1-6) unstable; urgency=medium
 .
   * QA upload.
   * debian/rules: Remove extra timestamps from the gzipped documentation
     and fix file mtimes before building the binary packages.
     (Closes: #787126). Thanks to Dhole <dhole@openmailbox.org>.
   * debian/rules: Pass BASH=/bin/bash to the ypserv configure
     script. (Closes: #977747)
   * debian/changelog: Clean up trailing whitespace.
   * debian/rules: Delete trailing whitespace.
   * Remove obsolete lintian overrides for non-etc-file-marked-as-conffile.
   * debian/rules: Replace calls to dpkg-architecture by using dpkg
Checksums-Sha1:
 77cb250f2d30c9870fbef4c0843d52a1fa706577 1287 nis_3.17.1-6.dsc
 450af7e8b75f2863425a3d1404caa25bb8138db4 40100 nis_3.17.1-6.debian.tar.xz
Checksums-Sha256:
 0d63df995efe1ec2b1db883409814cbc05b61550aa7b73eff2a11998e8d67dff 1287 nis_3.17.1-6.dsc
 c5cbe0fa3f1457b18331be1b7bf2c18ae709fe9ae6adfeaf17167765ed57db59 40100 nis_3.17.1-6.debian.tar.xz
Files:
 bd7a7757617be2d1257312cad3c6c422 1287 net optional nis_3.17.1-6.dsc
 8e4f30e3abcb49c715064dd7d9ef2933 40100 net optional nis_3.17.1-6.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCX97esiAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqvKyAQD5CzQHuO3FPdLr
9gg287iNs2O5GWyJKrai99qR3iitUAD/WSJi6F7T1u+Yixot56vh01+gqVA4Ps7h
wCm3DGi3AQM=
=LcDH
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Fri, 29 Jan 2021 07:28:07 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 12:50:42 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.