Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.rc > #319272 > unrolled thread

Bug#1010152: emacs-gtk: tries to read a config file from another user's home dir

Started byVincent Lefevre <vincent@vinc17.net>
First post2022-04-25 14:40 +0200
Last post2022-10-12 20:40 +0200
Articles 5 — 2 participants

Back to article view | Back to linux.debian.bugs.rc

Contents

  Bug#1010152: emacs-gtk: tries to read a config file from another user's home dir Vincent Lefevre <vincent@vinc17.net> - 2022-04-25 14:40 +0200
    Bug#1010152: emacs-gtk: tries to read a config file from another user's home dir Vincent Lefevre <vincent@vinc17.net> - 2022-04-25 15:40 +0200
    Processed: Re: emacs-gtk: tries to read a config file from  another user's home dir "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-04-25 15:50 +0200
    Processed: Re: emacs-gtk: tries to read a config file from  another user's home dir "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-05-12 15:10 +0200
    Processed: Re: emacs-gtk: tries to read a config file from  another user's home dir "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-10-12 20:40 +0200

#319272 — Bug#1010152: emacs-gtk: tries to read a config file from another user's home dir

FromVincent Lefevre <vincent@vinc17.net>
Date2022-04-25 14:40 +0200
SubjectBug#1010152: emacs-gtk: tries to read a config file from another user's home dir
Message-ID<Eg6at-b5LW-1@gated-at.bofh.it>
Package: emacs-gtk
Version: 1:27.1+1-3.1+b1
Severity: grave
Tags: security
Justification: user security hole
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>

After wondering why Emacs was hanging on startup after a reinstallation
of machines with Debian 11 at my lab, I looked at the strace output
(strace -o str.out -f /usr/bin/emacs-gtk -Q) and could see:

[...]
380295 openat(AT_FDCWD, "/usr/share/X11/POSIX/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/share/X11/POSIX/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/share/X11/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/share/X11/POSIX/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/share/X11/POSIX/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/share/X11/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/lib/X11/POSIX/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/lib/X11/POSIX/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/lib/X11/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/lib/X11/POSIX/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/lib/X11/POSIX/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/usr/lib/X11/app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/home/vlefevre/.app-defaults/POSIX/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/home/vlefevre/.app-defaults/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/home/vlefevrePOSIX/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
380295 openat(AT_FDCWD, "/home/vlefevreEmacs", O_RDONLY) = -1 ENOENT (No such file or directory)
[...]

So, Emacs tries to open /home/vlefevrePOSIX/Emacs and
/home/vlefevreEmacs, which potentially belong to other users!

Moreover, here, this makes Emacs hang for several dozens of seconds
possibly due to a timeout in the automounter or something like that.

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.17.0-1-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=POSIX, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages emacs-gtk depends on:
ii  emacs-bin-common     1:27.1+1-3.1+b1
ii  emacs-common         1:27.1+1-3.1
ii  libacl1              2.3.1-1
ii  libasound2           1.2.6.1-2+b1
ii  libc6                2.33-7
ii  libcairo2            1.16.0-5
ii  libdbus-1-3          1.14.0-1
ii  libfontconfig1       2.13.1-4.4
ii  libfreetype6         2.11.1+dfsg-1
ii  libgdk-pixbuf-2.0-0  2.42.8+dfsg-1
ii  libgif7              5.1.9-2.1
ii  libglib2.0-0         2.72.1-1
ii  libgmp10             2:6.2.1+dfsg-3
ii  libgnutls30          3.7.4-2
ii  libgpm2              1.20.7-10
ii  libgtk-3-0           3.24.33-1
ii  libharfbuzz0b        2.7.4-1+b1
ii  libice6              2:1.0.10-1
ii  libjansson4          2.14-2
ii  libjpeg62-turbo      1:2.1.2-1
ii  liblcms2-2           2.12~rc1-2
ii  libm17n-0            1.8.0-4
ii  libotf1              0.9.16-3
ii  libpango-1.0-0       1.50.6+ds-2
ii  libpng16-16          1.6.37-4
ii  librsvg2-2           2.52.5+dfsg-3+b1
ii  libselinux1          3.3-1+b2
ii  libsm6               2:1.2.3-1
ii  libsystemd0          250.4-1
ii  libtiff5             4.3.0-6
ii  libtinfo6            6.3-2
ii  libx11-6             2:1.7.5-1
ii  libxext6             2:1.3.4-1
ii  libxfixes3           1:6.0.0-1
ii  libxml2              2.9.13+dfsg-1+b1
ii  libxrender1          1:0.9.10-1
ii  zlib1g               1:1.2.11.dfsg-4

emacs-gtk recommends no packages.

Versions of packages emacs-gtk suggests:
ii  emacs-common-non-dfsg  1:27.1+1-2

-- no debconf information

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

[toc] | [next] | [standalone]

#319274

FromVincent Lefevre <vincent@vinc17.net>
Date2022-04-25 15:40 +0200
Message-ID<Eg76x-b6ri-1@gated-at.bofh.it>
In reply to#319272
On 2022-04-25 15:23:43 +0200, Vincent Lefevre wrote:
> I can reproduce the issue with upstream's 27.1 version:
> 
> 11    openat(AT_FDCWD, "/home/vlefevrePOSIX/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
> 11    openat(AT_FDCWD, "/home/vlefevreEmacs", O_RDONLY) = -1 ENOENT (No such file or directory)
> 
> but not with master:
> 
> 481514 openat(AT_FDCWD, "/home/vlefevre/POSIX/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
> 481514 openat(AT_FDCWD, "/home/vlefevre/Emacs", O_RDONLY) = -1 ENOENT (No such file or directory)
> 
> (this was actually a missing slash after the home dir).

This is also fixed in upstream's 27.2.

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

[toc] | [prev] | [next] | [standalone]

#319276 — Processed: Re: emacs-gtk: tries to read a config file from another user's home dir

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2022-04-25 15:50 +0200
SubjectProcessed: Re: emacs-gtk: tries to read a config file from another user's home dir
Message-ID<Eg7gd-b6uB-3@gated-at.bofh.it>
In reply to#319272
Processing control commands:

> forwarded -1 https://debbugs.gnu.org/cgi/bugreport.cgi?bug=42827
Bug #1010152 [emacs-gtk] emacs-gtk: tries to read a config file from another user's home dir
Set Bug forwarded-to-address to 'https://debbugs.gnu.org/cgi/bugreport.cgi?bug=42827'.

-- 
1010152: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010152
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#319878 — Processed: Re: emacs-gtk: tries to read a config file from another user's home dir

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2022-05-12 15:10 +0200
SubjectProcessed: Re: emacs-gtk: tries to read a config file from another user's home dir
Message-ID<EmgJP-eYY0-7@gated-at.bofh.it>
In reply to#319272
Processing control commands:

> tags -1 patch
Bug #1010152 [emacs-gtk] emacs-gtk: tries to read a config file from another user's home dir
Added tag(s) patch.

-- 
1010152: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010152
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#328429 — Processed: Re: emacs-gtk: tries to read a config file from another user's home dir

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2022-10-12 20:40 +0200
SubjectProcessed: Re: emacs-gtk: tries to read a config file from another user's home dir
Message-ID<FfOO5-dOpA-3@gated-at.bofh.it>
In reply to#319272
Processing control commands:

> fixed -1 1:27.2~
Bug #1010152 [emacs-gtk] emacs-gtk: tries to read a config file from another user's home dir
There is no source info for the package 'emacs-gtk' at version '1:27.2~' with architecture ''
Unable to make a source version for version '1:27.2~'
Marked as fixed in versions 1:27.2~.

-- 
1010152: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010152
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.rc

csiph-web