Control: tags 763198 + unreproducible moreinfo
On 10/02/2014 01:52 AM, Florian Weimer wrote:
> * Matt Taggart:
>
>> I am also seeing the problem in #763198 where debirf creation appears to be
>> broken with the new bash. cc'ing bash maintainer and security team, maybe
>> they will know if the problem is in debirf or the bash fix.
>
> I think this is the result of the environment of a patched bash
> leaking into a chroot which still has an unpatched bash.
>
> It's not clear to me why debirf needs exported functions. If these
> functions do not have to be exported to the chroot, it is probably
> best to use "env -i" to call the chroot programs in debirf_exec (which
> will reset TMPDIR as well).
I'm not seeing this behavior at all on an up-to-date amd64 wheezy system.
I just did a clean wheezy install, with bash 4.2+dfsg-0.1+deb7u3 and
debirf 0.33.
I built the debirf image with a non-privileged user starting from an
empty directory. I did:
tar xzf /usr/share/doc/debirf/example-profiles/rescue.tgz
debirf make rescue
The version of bash on the inside of the debirf image is the same as the
version on the host.
Can any of the folks who have seen this problem tell me how their setups
differ from what i've done above?
Thanks,
--dkg
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
