Debian Bug report logs - #978009
calife: reproducible builds: /usr/bin/calife contains embedded path to "su"

version graph

Package: src:calife; Maintainer for src:calife is Debian QA Group <packages@qa.debian.org>;

Reported by: Vagrant Cascadian <vagrant@reproducible-builds.org>

Date: Thu, 24 Dec 2020 10:21:04 UTC

Severity: normal

Tags: patch

Fixed in version calife/1:3.0.1-6

Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian QA Group <packages@qa.debian.org>:
Bug#978009; Package src:calife. (Thu, 24 Dec 2020 10:21:06 GMT) (full text, mbox, link).


Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian QA Group <packages@qa.debian.org>. (Thu, 24 Dec 2020 10:21:06 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: submit@bugs.debian.org
Subject: calife: reproducible builds: /usr/bin/calife contains embedded path to "su"
Date: Thu, 24 Dec 2020 02:16:29 -0800
[Message part 1 (text/plain, inline)]
Source: calife
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: usrmerge
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The file /usr/bin/calife contains an embedded path to the "su" command:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/calife.html

Which may be /bin/su or /usr/bin/su on a usrmerged system.

The attached patch fixes this by passing the SU_CMD variable to
configure.


Thanks for maintaining calife!


live well,
  vagrant
[0002-debian-rules-Pass-SU_CMD-to-configure.patch (text/x-diff, inline)]
From 3a2ed4653a1aa23d4ca974a49123f5d707122cf7 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Thu, 24 Dec 2020 09:27:40 +0000
Subject: [PATCH 2/7] debian/rules: Pass SU_CMD to configure.

The path to "su" may vary as either /bin/su or /usr/bin/su if the
system is configured as a usrmerge system. Use /bin/su for the most
compatible location.

https://tests.reproducible-builds.org/debian/issues/unstable/paths_vary_due_to_usrmerge_issue.html
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 989b593..2eed177 100755
--- a/debian/rules
+++ b/debian/rules
@@ -5,3 +5,6 @@
 override_dh_auto_install:
 
 override_dh_auto_test:
+
+override_dh_auto_configure:
+	dh_auto_configure -- SU_CMD=/bin/su
-- 
2.20.1

[signature.asc (application/pgp-signature, inline)]

Reply sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
You have taken responsibility. (Thu, 24 Dec 2020 11:06:08 GMT) (full text, mbox, link).


Notification sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug acknowledged by developer. (Thu, 24 Dec 2020 11:06:08 GMT) (full text, mbox, link).


Message #10 received at 978009-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 978009-close@bugs.debian.org
Subject: Bug#978009: fixed in calife 1:3.0.1-6
Date: Thu, 24 Dec 2020 11:03:31 +0000
Source: calife
Source-Version: 1:3.0.1-6
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
calife, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 978009@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated calife package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 24 Dec 2020 02:43:44 -0800
Source: calife
Architecture: source
Version: 1:3.0.1-6
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 978009
Changes:
 calife (1:3.0.1-6) unstable; urgency=medium
 .
   * QA upload.
   * debian/rules: Pass SU_CMD to configure (Closes: #978009).
   * debian/rules: Set Rules-Requires-Root to "no".
   * Switch to debhelper-compat 10.
   * debian/rules: Remove deprecated use of --with autotools_dev.
   * Drop autotools-dev dependency, enabled by debhelper compat level.
   * debian/rules: Pass --without autoreconf to dh.
   * Remove obsolete README.source entry.
   * debian/control: Update Standards-Version to 4.5.1.
   * debian/control: Add Vcs headers.
Checksums-Sha1:
 6c4a68679355a36d263856ef38b10f235d486451 1327 calife_3.0.1-6.dsc
 0e61556f79ee1ca19cdebe3423e2994e56a99df9 4368 calife_3.0.1-6.debian.tar.xz
Checksums-Sha256:
 ec91b9310d5e39053c002cc4774e369f350b00dea89caea4e336c34f565ba8f3 1327 calife_3.0.1-6.dsc
 9329ff445c8d9a63d60f176d2e342c40d4a3591a83334e5da374df19e01fc4b0 4368 calife_3.0.1-6.debian.tar.xz
Files:
 cdc1711c3b0c5caf13e0313db455b464 1327 admin optional calife_3.0.1-6.dsc
 db982a00cf65aad84118c7caa3b1cf38 4368 admin optional calife_3.0.1-6.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCX+RxlSAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqkeYAPwOD3OoeVSGSbLZ
GTCUgwuE+LZmcPPOJNKagXjZ6DVGOwD/Q6kUOCiDt0ZyQdm3uciTWARbgu+amsbl
gL+djq8/uQQ=
=ELQ5
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 26 Jan 2021 07:25:32 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 12:50:15 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.