Your message dated Sun, 03 Jan 2021 16:37:10 +0000
with message-id <[email protected]>
and subject line Bug#976307: fixed in sudo 1.9.4p2-2
has caused the Debian Bug report #976307,
regarding sudo: reproducible builds: different binaries when built on usrmerge
system
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
976307: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976307
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: sudo
Severity: normal
Tags: patch
User: [email protected]
Usertags: usrmerge
X-Debbugs-Cc: [email protected]
When built on a system with usrmerge enabled, and a system without
usrmerge enabled, the visudo binary embeds different paths for the
"mv" program:
https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/sudo.html
189 ··0x00023ba0·30256f20·2573002f·62696e2f·6d76002b·0%o·%s./bin/mv.+
189 ··0x00023ba0·30256f20·2573002f·7573722f·62696e2f·0%o·%s./usr/bin/
190 ··0x00023bb0·31006e65·78006e76·69007669·6d00656c·1.nex.nvi.vim.el
190 ··0x00023bb0·6d76002b·31006e65·78006e76·69007669·mv.+1.nex.nvi.vi
The attached patch fixes this by passing an argument to configure to use
/bin/mv.
Thanks for maintaining sudo!
live well,
vagrant
From a88dfde16b4aac231342bbdd07ec25180dded8f7 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Thu, 3 Dec 2020 08:09:10 +0000
Subject: [PATCH] debian/rules: Pass MVPROG=/bin/mv to configure to ensure
reproducible build.
When built on a system with usrmerge enabled, and a system without
usrmerge enabled, the visudo binary embeds different paths for the
"mv" program.
Passing the /bin location to configure ensures using the most
compatible path, as a usrmerge system should have compatibility
symlinks available for /bin, while a non-usrmerge system is unlikely
to have compatibility symlinks for the /usr/bin location.
---
debian/rules | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/debian/rules b/debian/rules
index 5b438ea..1117b57 100755
--- a/debian/rules
+++ b/debian/rules
@@ -14,6 +14,10 @@ ifeq ($(DEB_HOST_ARCH_OS),linux)
configure_args += --with-selinux --with-linux-audit --enable-tmpfiles.d=yes
endif
+# Consistently use /bin/mv to ensure reproducible builds regardless of
+# building on a usrmerge or non-usrmerge system.
+configure_args += MVPROG=/bin/mv
+
reconf-stamp:
cp -f /usr/share/misc/config.sub config.sub
cp -f /usr/share/misc/config.guess config.guess
--
2.20.1
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: sudo
Source-Version: 1.9.4p2-2
Done: Bdale Garbee <[email protected]>
We believe that the bug you reported is fixed in the latest version of
sudo, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bdale Garbee <[email protected]> (supplier of updated sudo package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 03 Jan 2021 09:11:13 -0700
Source: sudo
Architecture: source
Version: 1.9.4p2-2
Distribution: unstable
Urgency: medium
Maintainer: Bdale Garbee <[email protected]>
Changed-By: Bdale Garbee <[email protected]>
Closes: 976307
Changes:
sudo (1.9.4p2-2) unstable; urgency=medium
.
* always use /bin/mv to ensure reproducible builds whether built on a
usrmerge or non-usrmerge system, closes: #976307
Checksums-Sha1:
30266322e2e3d40388bf9c6bb37c3029ab780240 1962 sudo_1.9.4p2-2.dsc
38c7abc11c576279ef132bed553ec5d45ab8654e 24044 sudo_1.9.4p2-2.debian.tar.xz
a1ad565c5bb10fc69d258e638079b745d5aff9e3 7118 sudo_1.9.4p2-2_amd64.buildinfo
Checksums-Sha256:
ddfab72b3eaaa7948b14d80b421505e991e7f6af170b152d94bd0ce7069a4c78 1962
sudo_1.9.4p2-2.dsc
1ad3755b8c3c99af8ed9cd4ac9f7a3502c786d10dfe09fa97de2832ca471be5c 24044
sudo_1.9.4p2-2.debian.tar.xz
34d820ff63c34d40e7fa9a64343c41fd884bf394639606599fce127559b9f9e5 7118
sudo_1.9.4p2-2_amd64.buildinfo
Files:
7b75b66a603692e56b5a92eedd1571a6 1962 admin optional sudo_1.9.4p2-2.dsc
9266a75f2bce74dae8b540192cd342e8 24044 admin optional
sudo_1.9.4p2-2.debian.tar.xz
4ba8e2d5c4cf225da4743540c71e643b 7118 admin optional
sudo_1.9.4p2-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=CME+
-----END PGP SIGNATURE-----
--- End Message ---
