Control: severity -1 normal

¡Hola Konomi!

El 2019-09-05 a las 01:14 +1000, Konomi escribió:
Package: sddm
Version: 0.18.0-1
Severity: grave
Tags: upstream
Justification: renders package unusable

Quoting the upstream bug report:

"sddm-greeter needs execution rights at 
/var/lib/sddm/.cache/sddm-greeter/qmlcache/*.qmlc.
krunner needs execution at /home/user/.cache/krunner/qmlcache/*.qmlc. It breaks
when /var and /home partitions are mounted with noexec flag which is often used 
on
hardened setups or Trusted Path Execution available on hardened linux kernels.

As for now it could be fixed by disabling qml cache by setting 
QML_DISABLE_DISK_CACHE=1
environment variable. Is there a chance that qt will check permission rights 
first then
quietly disable qmlcache per app instead of crashing?

Alternatively it could create cachedir somewhere in /usr/lib/qt same as python3 
have
it's pycache dir."

Upstream bug report: https://bugreports.qt.io/browse/QTBUG-58508

The work around of adding QML_DISABLE_DISK_CACHE=1 to /etc/enviroment got sddm 
working
for me again. Without the work around sddm will start but show just a black 
screen, so
I've marked this bug as grave since it completely breaks the package.

I don't see any reference that a program needs to support a hardened setup in Debian, and this is clearly something not supported upstream, as such I'm degrading the severity of this issue.

Let's see what do the qt maintainers think about setting a different cache dir or patching qt to disable the disk cache if the cache won't be loadable.

Happy hacking,
--
"It's a well-known fact that computing devices such as the abacus were invented thousands of years ago. But it's not well known that the first use of common computer protocol occurred in the Old Testament. This, of course, was when Moses aborted the Egyptians' process with a control-sea."
-- Tom Galloway (recs.arts.comics, February 1992)
Saludos /\/\ /\ >< `/

Attachment: signature.asc
Description: PGP signature

Reply via email to