GNU logs - #47576, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#47576: [security] ibus-daemon launches ungrafted subprocesses
Resent-From: Mark H Weaver <mhw@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 03 Apr 2021 04:46:01 +0000
Resent-Message-ID: <handler.47576.B.161742514727642 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 47576 <at> debbugs.gnu.org
From: Mark H Weaver <mhw@HIDDEN>
Date: Sat, 03 Apr 2021 00:44:02 -0400
Message-ID: <87pmzcdljm.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Received-SPF: pass client-ip=64.112.178.59; envelope-from=mhw@HIDDEN;
 helo=world.peace.net
X-Spam_score_int: -18
X-Spam_score: -1.9
X-Spam_bar: -
X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

Several processes on my Guix system load shared libraries from the
*ungrafted* glib: specifically, all of the subprocesses of
'ibus-daemon'.

The 'ibus-daemon' process itself seems to be properly grafted.  However,
its subprocesses are from an old, ungrafted build of 'ibus':

--8<---------------cut here---------------start------------->8---
mhw@jojen ~$ pstree -up 796
.ibus-daemon-re(796,mhw)=E2=94=80=E2=94=AC=E2=94=80.ibus-dconf-rea(803)=E2=
=94=80=E2=94=AC=E2=94=80{.ibus-dconf-rea}(806)
                         =E2=94=82                      =E2=94=94=E2=94=80{=
.ibus-dconf-rea}(807)
                         =E2=94=9C=E2=94=80.ibus-engine-si(892)=E2=94=80=E2=
=94=AC=E2=94=80{.ibus-engine-si}(917)
                         =E2=94=82                      =E2=94=94=E2=94=80{=
.ibus-engine-si}(918)
                         =E2=94=9C=E2=94=80.ibus-extension(804)=E2=94=80=E2=
=94=AC=E2=94=80{.ibus-extension}(810)
                         =E2=94=82                      =E2=94=9C=E2=94=80{=
.ibus-extension}(811)
                         =E2=94=82                      =E2=94=94=E2=94=80{=
.ibus-extension}(819)
                         =E2=94=9C=E2=94=80{.ibus-daemon-re}(797)
                         =E2=94=94=E2=94=80{.ibus-daemon-re}(798)
mhw@jojen ~$ ps -fq 796,803,892,804
UID        PID  PPID  C STIME TTY          TIME CMD
mhw        796   698  0 00:10 tty8     00:00:00 /gnu/store/radg6xacqvw60d76=
k97y0ydccjm7iq7a-ibus-1.5.22/bin/ibus-daemon --panel disable -r --xim
mhw        803   796  0 00:10 tty8     00:00:00 /gnu/store/a4r6q1fbfqapy5hr=
rxap1yg96rjgln6q-ibus-1.5.22/libexec/ibus-dconf
mhw        892   796  0 00:10 tty8     00:00:00 /gnu/store/a4r6q1fbfqapy5hr=
rxap1yg96rjgln6q-ibus-1.5.22/libexec/ibus-engine-simple
mhw        804   796  2 00:10 tty8     00:00:01 /gnu/store/a4r6q1fbfqapy5hr=
rxap1yg96rjgln6q-ibus-1.5.22/libexec/ibus-extension-gtk3
--8<---------------cut here---------------end--------------->8---

(The same issue occurs for the 'ibus-daemon' that's owned by 'gdm').

/gnu/store/radg=E2=80=A6-ibus-1.5.22 seems to be the properly grafted 'ibus=
',
replacing the ungrafted /gnu/store/wnqv=E2=80=A6-ibus-1.5.22 which I last b=
uilt
on February 2nd: (I don't use substitutes)

--8<---------------cut here---------------start------------->8---
mhw@jojen ~$ bzcat $(guix build --log-file /gnu/store/radg6xacqvw60d76k97y0=
ydccjm7iq7a-ibus-1.5.22)
grafting '/gnu/store/wnqv8rj3ngjivl6334d1h8irszf39dm9-ibus-1.5.22' -> '/gnu=
/store/radg6xacqvw60d76k97y0ydccjm7iq7a-ibus-1.5.22'...
mhw@jojen ~$ ls -l $(guix build --log-file /gnu/store/wnqv8rj3ngjivl6334d1h=
8irszf39dm9-ibus-1.5.22)
-rw-r--r-- 1 root root 24923 Feb  2 10:35 /var/log/guix/drvs/hx/qpdblmghj7p=
vg0ni2l38p0a1s4igbd-ibus-1.5.22.drv.bz2
--8<---------------cut here---------------end--------------->8---

The reference scanner does not see any references to any other 'ibus',
from either my system, my user profile, or the grafted 'ibus':

--8<---------------cut here---------------start------------->8---
mhw@jojen ~$ guix gc -R $(readlink -f /run/current-system) | grep -e -ibus-
/gnu/store/radg6xacqvw60d76k97y0ydccjm7iq7a-ibus-1.5.22
mhw@jojen ~$ guix gc -R $(readlink -f ~/.guix-profile) | grep -e -ibus-
mhw@jojen ~$ guix gc -R /gnu/store/radg6xacqvw60d76k97y0ydccjm7iq7a-ibus-1.=
5.22 | grep -e -ibus-
/gnu/store/radg6xacqvw60d76k97y0ydccjm7iq7a-ibus-1.5.22
--8<---------------cut here---------------end--------------->8---

Interestingly, the subprocesses are *not* from the ungrafted 'ibus' that
I last built on February 2nd.  Instead, they are from a much older
ungrafted 'ibus', which I last built on December 20th of last year:

--8<---------------cut here---------------start------------->8---
mhw@jojen ~$ ls -l $(guix build --log-file /gnu/store/a4r6q1fbfqapy5hrrxap1=
yg96rjgln6q-ibus-1.5.22)
-rw-r--r-- 1 root root 24981 Dec 20 20:33 /var/log/guix/drvs/sn/k6581cpk6n8=
q3dvsarqmqimhx0n2i2-ibus-1.5.22.drv.bz2
--8<---------------cut here---------------end--------------->8---

I'm at a bit of a loss of where this much older, ungrafted 'ibus' is
coming from.  Running "guix build ibus", with and without grafts, give
the other two 'ibus' store items:

--8<---------------cut here---------------start------------->8---
mhw@jojen ~$ guix build ibus --no-grafts
/gnu/store/wnqv8rj3ngjivl6334d1h8irszf39dm9-ibus-1.5.22
mhw@jojen ~$ guix build ibus
/gnu/store/radg6xacqvw60d76k97y0ydccjm7iq7a-ibus-1.5.22
--8<---------------cut here---------------end--------------->8---

Is there another variant of the 'ibus' package hiding somewhere?
Where is "/gnu/store/a4r6=E2=80=A6-ibus-1.5.22" coming from?

I don't know that I'll have the energy to investigate this further
anytime soon, so I'm hoping that someone else will pick this up.

* * *

FYI, I discovered this while doing sanity checks on my new preliminary
grafting implementation (which supports rewriting UTF-16/32 store
references).  Looking for references to the old 'glib' was the *first*
thing I checked.  I haven't yet checked anything else, so I don't know
how widespread this problem is.

       Mark

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Mark H Weaver <mhw@HIDDEN>
Subject: bug#47576: Acknowledgement ([security] ibus-daemon launches
 ungrafted subprocesses)
Message-ID: <handler.47576.B.161742514727642.ack <at> debbugs.gnu.org>
References: <87pmzcdljm.fsf@HIDDEN>
X-Gnu-PR-Message: ack 47576
X-Gnu-PR-Package: guix
Reply-To: 47576 <at> debbugs.gnu.org
Date: Sat, 03 Apr 2021 04:46:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 47576 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
47576: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D47576
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-guix@HIDDEN:

Subject: bug#47576: [security] ibus-daemon launches ungrafted subprocesses
References: <87pmzcdljm.fsf@HIDDEN>
In-Reply-To: <87pmzcdljm.fsf@HIDDEN>
Resent-From: Mark H Weaver <mhw@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 03 Apr 2021 04:54:01 +0000
Resent-Message-ID: <handler.47576.B47576.16174255981176 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 47576 <at> debbugs.gnu.org
From: Mark H Weaver <mhw@HIDDEN>
Date: Sat, 03 Apr 2021 00:51:32 -0400
Message-ID: <87mtugdl74.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Here's an obvious check that I should have included in my last message:

--8<---------------cut here---------------start------------->8---
mhw@jojen ~$ guix gc --referrers /gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22
/gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22
mhw@jojen ~$ 
--8<---------------cut here---------------end--------------->8---

This is the 'ibus' that I last built in December 2020, and which is
somehow, mysteriously, being used for the subprocesses of 'ibus-daemon'.

       Mark

Message sent to bug-guix@HIDDEN:

Subject: bug#47576: [security] ibus-daemon launches ungrafted subprocesses
Resent-From: Mark H Weaver <mhw@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 03 Apr 2021 07:15:01 +0000
Resent-Message-ID: <handler.47576.B47576.161743407214472 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 47576 <at> debbugs.gnu.org
From: Mark H Weaver <mhw@HIDDEN>
In-Reply-To: <87pmzcdljm.fsf@HIDDEN>
References: <87pmzcdljm.fsf@HIDDEN>
Date: Sat, 03 Apr 2021 03:12:46 -0400
Message-ID: <877dljdenq.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Earlier, I wrote:
> Looking for references to the old 'glib' was the *first* thing I
> checked.  I haven't yet checked anything else, so I don't know how
> widespread this problem is.

I looked for other ungrafted libraries loaded on my system, and I'm glad
to report that I see no evidence of any grafting problem other than this
'ibus-daemon' issue.

The following ungrafted libraries are loaded by processes from the
mysterious old version of 'ibus' on my system: glib, cairo, and libx11.
I still have no clue where the reference to that mysterious old version
(/gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22) is coming
from.

Are other people seeing this?  Here's an easy way to check:

--8<---------------cut here---------------start------------->8---
mhw@jojen ~$ ps axf | grep -e -ibus-
  402 tty7     Sl     0:00  |           |   \_ /gnu/store/vdc4j6c9psx8jicr5h2n8jdxsfjms3h2-ibus-1.5.22/bin/ibus-daemon --panel disable -r --xim
  407 tty7     Sl     0:00  |           |       \_ /gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22/libexec/ibus-dconf
  450 tty7     Sl     0:00  |           |       \_ /gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22/libexec/ibus-engine-simple
  798 tty8     Sl     0:00              |   \_ /gnu/store/vdc4j6c9psx8jicr5h2n8jdxsfjms3h2-ibus-1.5.22/bin/ibus-daemon --panel disable -r --xim
  804 tty8     Sl     0:00              |   |   \_ /gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22/libexec/ibus-dconf
  805 tty8     Sl     0:01              |   |   \_ /gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22/libexec/ibus-extension-gtk3
  894 tty8     Sl     0:00              |   |   \_ /gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22/libexec/ibus-engine-simple
 2246 pts/0    S+     0:00              |   |   |   \_ grep -e -ibus-
  409 tty7     Sl     0:00 /gnu/store/vdc4j6c9psx8jicr5h2n8jdxsfjms3h2-ibus-1.5.22/libexec/ibus-x11 --kill-daemon
  808 tty8     Sl     0:00 /gnu/store/vdc4j6c9psx8jicr5h2n8jdxsfjms3h2-ibus-1.5.22/libexec/ibus-x11 --kill-daemon
--8<---------------cut here---------------end--------------->8---

If you run this command, do you also see different 'ibus' store items
used by the daemon and its subprocesses?

      Mark

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#47576: [security] ibus-daemon launches ungrafted subprocesses
Resent-From: Mark H Weaver <mhw@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 03 Apr 2021 07:34:01 +0000
Resent-Message-ID: <handler.47576.B47576.161743521116255 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 47576
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 47576 <at> debbugs.gnu.org
Received: via spool by 47576-submit <at> debbugs.gnu.org id=B47576.161743521116255
          (code B ref 47576); Sat, 03 Apr 2021 07:34:01 +0000
Received: (at 47576) by debbugs.gnu.org; 3 Apr 2021 07:33:31 +0000
Received: from localhost ([127.0.0.1]:33207 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lSamg-0004E6-Vj
	for submit <at> debbugs.gnu.org; Sat, 03 Apr 2021 03:33:31 -0400
Received: from world.peace.net ([64.112.178.59]:37424)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mhw@HIDDEN>) id 1lSamf-0004Du-Jn
 for 47576 <at> debbugs.gnu.org; Sat, 03 Apr 2021 03:33:29 -0400
Received: from mhw by world.peace.net with esmtpsa
 (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92)
 (envelope-from <mhw@HIDDEN>)
 id 1lSamZ-0005mO-77; Sat, 03 Apr 2021 03:33:23 -0400
From: Mark H Weaver <mhw@HIDDEN>
In-Reply-To: <877dljdenq.fsf@HIDDEN>
References: <87pmzcdljm.fsf@HIDDEN> <877dljdenq.fsf@HIDDEN>
Date: Sat, 03 Apr 2021 03:31:44 -0400
Message-ID: <874kgndds4.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

I wrote:
> I still have no clue where the reference to that mysterious old version
> (/gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22) is coming
> from.

I found them:

  ~/.cache/ibus/bus/registry
  /var/lib/gdm/.cache/ibus/bus/registry

On my system, those files include absolute pathnames to programs in
/gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22, which I
compiled last December.

That old store item has been kept safe from GC for only one reason:
because 'ibus-daemon', along with its subprocesses, tend to be running
whenever I run "guix gc", and "guix gc" protects store items that are
currently in use by active processes.

      Mark

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#47576: [security] ibus-daemon launches ungrafted subprocesses
Resent-From: Julien Lepiller <julien@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 03 Apr 2021 11:30:02 +0000
Resent-Message-ID: <handler.47576.B47576.16174493565700 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 47576
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Mark H Weaver <mhw@HIDDEN>,47576 <at> debbugs.gnu.org
Received: via spool by 47576-submit <at> debbugs.gnu.org id=B47576.16174493565700
          (code B ref 47576); Sat, 03 Apr 2021 11:30:02 +0000
Received: (at 47576) by debbugs.gnu.org; 3 Apr 2021 11:29:16 +0000
Received: from localhost ([127.0.0.1]:33280 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lSeSq-0001Ts-F6
	for submit <at> debbugs.gnu.org; Sat, 03 Apr 2021 07:29:16 -0400
Received: from lepiller.eu ([89.234.186.109]:36780)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <julien@HIDDEN>) id 1lSeSn-0001Tg-8b
 for 47576 <at> debbugs.gnu.org; Sat, 03 Apr 2021 07:29:14 -0400
Received: from lepiller.eu (localhost [127.0.0.1])
 by lepiller.eu (OpenSMTPD) with ESMTP id 50ddc109;
 Sat, 3 Apr 2021 11:29:10 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=lepiller.eu; h=date
 :in-reply-to:references:mime-version:content-type
 :content-transfer-encoding:subject:to:from:message-id; s=dkim;
 bh=vvI2Qe9+Z07BvH1TGsin69UA+C/BqAn9CTRiEPnHIxQ=; b=OZ9jpsA51320
 Hihn6hc3j61lfFwOzF//NwHh/Nspb7iqDw++RDWzYmDVU3xr18lzlDmY1GQBGzvr
 aafyvAcRlRXNzjIBu3NrvHpf0tdAnmqQsxMBX2LahNEehC/uGbhD6T6h1nuQ9plt
 LhHkQq/isWLdrQf5Kyd/zPiSxC5tr0m1/tfxSKyD1X6NHL6P4dX4IiPW4ldzeL+7
 7ygNqfLBFsNlH/qS8K/71gfUFGnr91aq/Rz75nzO6744DXNGIT8dRiUitXBdNVaL
 +fP03pbe0DhPNv/0aVrBAQNqlmwiIC3VmjEL18KMp5UI4QU8epaMiQ001p0dgJnF
 0NyaQdZFzQ==
Received: by lepiller.eu (OpenSMTPD) with ESMTPSA id 233e8ddc
 (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO); 
 Sat, 3 Apr 2021 11:29:10 +0000 (UTC)
Date: Sat, 03 Apr 2021 07:29:00 -0400
User-Agent: K-9 Mail for Android
In-Reply-To: <874kgndds4.fsf@HIDDEN>
References: <87pmzcdljm.fsf@HIDDEN> <877dljdenq.fsf@HIDDEN>
 <874kgndds4.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----M0Z305E8YTI0B4FTXDWGPTLJFILRL5"
Content-Transfer-Encoding: 7bit
From: Julien Lepiller <julien@HIDDEN>
Message-ID: <8BEEF3C6-82DC-459A-9013-3850754DA3B2@HIDDEN>
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

------M0Z305E8YTI0B4FTXDWGPTLJFILRL5
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

Oh! That would explain why I had so much trouble fixing/updating ibus and i=
bus-anthy!

We should probably fix ibus so it regenerates its cache when it's a differ=
ent process=2E It could be as simple as using a subdirectory computed from =
the absolute name of the ibus binary, maybe=2E

Le 3 avril 2021 03:31:44 GMT-04:00, Mark H Weaver <mhw@netris=2Eorg> a =C3=
=A9crit :
>I wrote:
>> I still have no clue where the reference to that mysterious old
>version
>> (/gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1=2E5=2E22) is coming
>> from=2E
>
>I found them:
>
>  ~/=2Ecache/ibus/bus/registry
>  /var/lib/gdm/=2Ecache/ibus/bus/registry
>
>On my system, those files include absolute pathnames to programs in
>/gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1=2E5=2E22, which I
>compiled last December=2E
>
>That old store item has been kept safe from GC for only one reason:
>because 'ibus-daemon', along with its subprocesses, tend to be running
>whenever I run "guix gc", and "guix gc" protects store items that are
>currently in use by active processes=2E
>
>      Mark

------M0Z305E8YTI0B4FTXDWGPTLJFILRL5
Content-Type: text/html;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head></head><body>Oh! That would explain why I had so much trouble f=
ixing/updating ibus and ibus-anthy!<br><br>We should probably fix ibus so i=
t regenerates its cache when it's a different process=2E It could be as sim=
ple as using a subdirectory computed from the absolute name of the ibus bin=
ary, maybe=2E<br><br><div class=3D"gmail_quote">Le 3 avril 2021 03:31:44 GM=
T-04:00, Mark H Weaver &lt;mhw@netris=2Eorg&gt; a =C3=A9crit :<blockquote c=
lass=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0=2E8ex; border-left: 1px=
 solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class=3D"k9mail">I wrote:<br><blockquote class=3D"gmail_quote" style=
=3D"margin: 0pt 0pt 1ex 0=2E8ex; border-left: 1px solid #729fcf; padding-le=
ft: 1ex;">I still have no clue where the reference to that mysterious old v=
ersion<br>(/gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1=2E5=2E22) is =
coming<br>from=2E<br></blockquote><br>I found them:<br><br>  ~/=2Ecache/ibu=
s/bus/registry<br>  /var/lib/gdm/=2Ecache/ibus/bus/registry<br><br>On my sy=
stem, those files include absolute pathnames to programs in<br>/gnu/store/a=
4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1=2E5=2E22, which I<br>compiled last D=
ecember=2E<br><br>That old store item has been kept safe from GC for only o=
ne reason:<br>because 'ibus-daemon', along with its subprocesses, tend to b=
e running<br>whenever I run "guix gc", and "guix gc" protects store items t=
hat are<br>currently in use by active processes=2E<br><br>      Mark<br><br=
><br><br></pre></blockquote></div></body></html>
------M0Z305E8YTI0B4FTXDWGPTLJFILRL5--

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#47576: [security] ibus-daemon launches ungrafted subprocesses
Resent-From: Maxime Devos <maximedevos@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 03 Apr 2021 13:17:02 +0000
Resent-Message-ID: <handler.47576.B47576.161745581924186 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 47576
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Mark H Weaver <mhw@HIDDEN>, 47576 <at> debbugs.gnu.org
Received: via spool by 47576-submit <at> debbugs.gnu.org id=B47576.161745581924186
          (code B ref 47576); Sat, 03 Apr 2021 13:17:02 +0000
Received: (at 47576) by debbugs.gnu.org; 3 Apr 2021 13:16:59 +0000
Received: from localhost ([127.0.0.1]:33379 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lSg94-0006I1-ND
	for submit <at> debbugs.gnu.org; Sat, 03 Apr 2021 09:16:59 -0400
Received: from andre.telenet-ops.be ([195.130.132.53]:56072)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <maximedevos@HIDDEN>) id 1lSg8y-0006Hp-TP
 for 47576 <at> debbugs.gnu.org; Sat, 03 Apr 2021 09:16:56 -0400
Received: from butterfly.local ([213.132.158.53])
 by andre.telenet-ops.be with bizsmtp
 id oDGq2400619Qjf101DGq98; Sat, 03 Apr 2021 15:16:51 +0200
Message-ID: <6df8bcf53b5f73402ae375f3772a9675c94250ae.camel@HIDDEN>
From: Maxime Devos <maximedevos@HIDDEN>
Date: Sat, 03 Apr 2021 15:16:49 +0200
In-Reply-To: <877dljdenq.fsf@HIDDEN>
References: <87pmzcdljm.fsf@HIDDEN> <877dljdenq.fsf@HIDDEN>
Content-Type: multipart/signed; micalg="pgp-sha256";
 protocol="application/pgp-signature"; boundary="=-7Nbw6Cpz6Dh+b82F/T9Y"
User-Agent: Evolution 3.34.2 
MIME-Version: 1.0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r21;
 t=1617455811; bh=UJFiu9vyIKmXTI+KPS4NfIlrKvIjDLv2bgxWoroijSs=;
 h=Subject:From:To:Date:In-Reply-To:References;
 b=vEY3j+2VPNpuB7roqBhREae24BAUUtQXB6kMP14OznSwgRVQbN8FcwVMXA59Ne/J/
 yH6fWvF2ogF/GHUdRUMQDeIKyIBWlD4mmqvNVnxtzEhBBqyuy/gjVgNCzhoi5W9SUM
 Pfyu4EX5ns9zm3cxDUQJaxiqPExJN+vTBm7dIchWSJWRYQAvyJ5s+QzLL0GUhija9+
 nBqefp8PZl4jobGokyN20Y3TfRW1GNjLHFl+adJSHNBOS3Svq7mLM8FHt+oviEDzsZ
 ABfirxoeMej8J9aRE9M85ZkMz/V/7CmGAV4gBeZ6uHzRpnNp/30g9iE4aEp0NUpRG1
 D+ihnz4P/9MZw==
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--=-7Nbw6Cpz6Dh+b82F/T9Y
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sat, 2021-04-03 at 03:12 -0400, Mark H Weaver wrote:
> [...]
>=20
> The following ungrafted libraries are loaded by processes from the
> mysterious old version of 'ibus' on my system: glib, cairo, and libx11.
> I still have no clue where the reference to that mysterious old version
> (/gnu/store/a4r6q1fbfqapy5hrrxap1yg96rjgln6q-ibus-1.5.22) is coming
> from.
>=20
> Are other people seeing this?  Here's an easy way to check:
>=20
> [...]
>=20
> If you run this command, do you also see different 'ibus' store items
> used by the daemon and its subprocesses?

I also see different store items:

$ ps axf | grep -e -ibus-
> 1141 tty7     Sl     0:00  |           |   \_ /gnu/store/a7lxf1i35yqil6px=
wxhzvr5q3xcqldyq-ibus-1.5.22/bin/ibus-daemon --panel disable -r
--xim
> 1146 tty7     Sl     0:00  |           |       \_ /gnu/store/7m04iv3pks6m=
6p8czw1mj58194rnfjyy-ibus-1.5.22/libexec/ibus-dconf
> 1269 tty7     Sl     0:00  |           |       \_ /gnu/store/7m04iv3pks6m=
6p8czw1mj58194rnfjyy-ibus-1.5.22/libexec/ibus-engine-simple
> 1148 tty7     Sl     0:00 /gnu/store/a7lxf1i35yqil6pxwxhzvr5q3xcqldyq-ibu=
s-1.5.22/libexec/ibus-x11 --kill-daemon
> 25649 pts/5    S+     0:00      \_ grep --color=3Dauto -e -ibus-

FWIW, this is on MATE.  (TODO to self: investigate why GNOME Shell crashes
after a few seconds.)

Greetings,
Maxime.

--=-7Nbw6Cpz6Dh+b82F/T9Y
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----

iI0EABYIADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYGhqwRccbWF4aW1lZGV2
b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7hXcAQCZs3+PKOz2+gSPP5pouzNaF1UE
TWZPD7HOqC8oxYK0RgD+NYCc29LL/mfqx4AuUc8yTga50SdJvdCpXx+Qt1wR4Aw=
=r2jI
-----END PGP SIGNATURE-----

--=-7Nbw6Cpz6Dh+b82F/T9Y--

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#47576: [security] ibus-daemon launches ungrafted subprocesses
Resent-From: Mark H Weaver <mhw@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 03 Apr 2021 21:13:01 +0000
Resent-Message-ID: <handler.47576.B47576.161748437028587 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 47576
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Julien Lepiller <julien@HIDDEN>, 47576 <at> debbugs.gnu.org
Received: via spool by 47576-submit <at> debbugs.gnu.org id=B47576.161748437028587
          (code B ref 47576); Sat, 03 Apr 2021 21:13:01 +0000
Received: (at 47576) by debbugs.gnu.org; 3 Apr 2021 21:12:50 +0000
Received: from localhost ([127.0.0.1]:34507 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lSnZZ-0007R1-VZ
	for submit <at> debbugs.gnu.org; Sat, 03 Apr 2021 17:12:50 -0400
Received: from world.peace.net ([64.112.178.59]:38852)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mhw@HIDDEN>) id 1lSnZX-0007Ql-Eb
 for 47576 <at> debbugs.gnu.org; Sat, 03 Apr 2021 17:12:48 -0400
Received: from mhw by world.peace.net with esmtpsa
 (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92)
 (envelope-from <mhw@HIDDEN>)
 id 1lSnZP-0004Yx-HV; Sat, 03 Apr 2021 17:12:39 -0400
From: Mark H Weaver <mhw@HIDDEN>
In-Reply-To: <8BEEF3C6-82DC-459A-9013-3850754DA3B2@HIDDEN>
References: <87pmzcdljm.fsf@HIDDEN> <877dljdenq.fsf@HIDDEN>
 <874kgndds4.fsf@HIDDEN>
 <8BEEF3C6-82DC-459A-9013-3850754DA3B2@HIDDEN>
Date: Sat, 03 Apr 2021 17:10:59 -0400
Message-ID: <87zgyf845d.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hi Julien,

Julien Lepiller <julien@HIDDEN> writes:
> We should probably fix ibus so it regenerates its cache when it's a
> different process. It could be as simple as using a subdirectory
> computed from the absolute name of the ibus binary, maybe.

Would you like to try?

I won't be able to work more on this bug anytime soon, but I hope that
others will pick it up.

     Thanks,
       Mark

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 6 Apr 2021 17:41:23 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 06 13:41:23 2021
Received: from localhost ([127.0.0.1]:41681 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lTphb-00081a-Bz
	for submit <at> debbugs.gnu.org; Tue, 06 Apr 2021 13:41:23 -0400
Received: from mail.zaclys.net ([178.33.93.72]:48317)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <lle-bout@HIDDEN>) id 1lTphY-00081M-Nz
 for control <at> debbugs.gnu.org; Tue, 06 Apr 2021 13:41:21 -0400
Received: from guix-xps.local (lsl43-1_migr-78-195-19-20.fbx.proxad.net
 [78.195.19.20] (may be forged)) (authenticated bits=0)
 by mail.zaclys.net (8.14.7/8.14.7) with ESMTP id 136HfFMO032026
 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
 for <control <at> debbugs.gnu.org>; Tue, 6 Apr 2021 19:41:15 +0200
DMARC-Filter: OpenDMARC Filter v1.3.2 mail.zaclys.net 136HfFMO032026
Authentication-Results: mail.zaclys.net;
 dmarc=fail (p=reject dis=none) header.from=zaclys.net
Authentication-Results: mail.zaclys.net;
 spf=fail smtp.mailfrom=lle-bout@HIDDEN
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zaclys.net;
 s=default; t=1617730875;
 bh=M+Oi72viMKRpsC/JNmkWjanh/IjzsNQNfbFMWwO9sqI=;
 h=Subject:From:To:Date:From;
 b=kNsqqP9z9jIdkeVKvYyo/EfHZwTBVwXo9SQ7ZKyGddnR9TyJ7K7xTnspBtDH3RdAs
 Ef8H5WErB1jOSHRZGe/shmJr33CQ3SDWuNsbZL5z1s60jEQsp+AP2aia/xdB590UWu
 xerHVLDqySF31e11Rif8wGzvVpHOpONp34R2L/5Q=
Message-ID: <cdf381c2117ff90daa8756e6cf3c6632f2479c34.camel@HIDDEN>
Subject: 
From: =?ISO-8859-1?Q?L=E9o?= Le Bouter <lle-bout@HIDDEN>
To: control <at> debbugs.gnu.org
Date: Tue, 06 Apr 2021 19:41:14 +0200
Content-Type: multipart/signed; micalg="pgp-sha512";
 protocol="application/pgp-signature"; boundary="=-SO5Sihs+s9TV9KvPxF3P"
User-Agent: Evolution 3.34.2 
MIME-Version: 1.0
X-Spam-Score: 2.0 (++)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  tags 47576 + security quit 
 Content analysis details:   (2.0 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 -0.0 SPF_PASS               SPF: sender matches SPF record
 2.0 BLANK_SUBJECT          Subject is present but empty
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 1.0 (+)


--=-SO5Sihs+s9TV9KvPxF3P
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

tags 47576 + security
quit



--=-SO5Sihs+s9TV9KvPxF3P
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
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=tbOx
-----END PGP SIGNATURE-----

--=-SO5Sihs+s9TV9KvPxF3P--

Last modified: Tue, 6 Apr 2021 17:45:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.