GNU bug report logs

#47576 [security] ibus-daemon launches ungrafted subprocesses

PackageSource(s)Maintainer(s)
guix PTS Buildd Popcon
Full log

Message #31 received at 47576@debbugs.gnu.org (full text, mbox, reply):

Received: (at 47576) by debbugs.gnu.org; 20 Apr 2021 14:51:20 +0000
From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 20 10:51:20 2021
Received: from localhost ([127.0.0.1]:55719 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lYrih-0005wq-TS
	for submit@debbugs.gnu.org; Tue, 20 Apr 2021 10:51:20 -0400
Received: from sender4-of-o51.zoho.com ([136.143.188.51]:21130)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <rekado@elephly.net>) id 1lYrig-0005wi-2Z
 for 47576@debbugs.gnu.org; Tue, 20 Apr 2021 10:51:18 -0400
ARC-Seal: i=1; a=rsa-sha256; t=1618930273; cv=none; 
 d=zohomail.com; s=zohoarc; 
 b=JnY/1yFEkbiPaodKaYnJbvsDC+C3PO1IJAH0t0rPDHe6SKtIGLdIsoYBm/1whr+vvF3eMvZkCSHbd78j8BIlwhvNKkuD1mN/jB+6a35F9ZJz4ttdXqus7BvS5Eq1Isw8R5y/Xw44Q9xLtELmbsCzgRs0QhjFkBfkPjK28VSQgGk=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com;
 s=zohoarc; 
 t=1618930273; h=Content-Type:Date:From:MIME-Version:Message-ID:Subject:To; 
 bh=vpF4CmWUOXytFVd+j6oi8VlCNKFoIObrCL/gyB9su/U=; 
 b=gHr4XvhziTHcrGEtbcy6TiuJg9HYM+0jskmAEwfx2LihqNBrnkr1h10nBVEyk+a9ZTJbXNqwPSnRov1AugWo9eZRG65FjBljtW8u5pVoom/8l1cZeEEoAhTdqP7U9eCxxMtqEu7UVV5X9rX5SKoGEibwtRCCsDuYtoXDRfXLDG4=
ARC-Authentication-Results: i=1; mx.zohomail.com;
 dkim=pass  header.i=elephly.net;
 spf=pass  smtp.mailfrom=rekado@elephly.net;
 dmarc=pass header.from=<rekado@elephly.net> header.from=<rekado@elephly.net>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1618930273; 
 s=zoho; d=elephly.net; i=rekado@elephly.net;
 h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type;
 bh=vpF4CmWUOXytFVd+j6oi8VlCNKFoIObrCL/gyB9su/U=;
 b=gaif/6ee50s7iLFTmi88cU0ryK5qXVRKNfStII1d1jMeVuZabSKtiMc/K55VCdys
 T7DJsTpJMhHao0TNYrW6QNGe5AkrGTLU4/fYsKI3GrDvR+a3VlyTC/zd5m4on+vf3BR
 lk3Rp+OuWNu4ccBCtMYSrJgRNM5fGZdoIBAO/LUA=
Received: from localhost (p54ad4e97.dip0.t-ipconnect.de [84.173.78.151]) by
 mx.zohomail.com with SMTPS id 1618930271333567.9689042627848;
 Tue, 20 Apr 2021 07:51:11 -0700 (PDT)
User-agent: mu4e 1.4.15; emacs 27.2
From: Ricardo Wurmus <rekado@elephly.net>
To: 47576@debbugs.gnu.org
Subject: [security] ibus-daemon launches ungrafted subprocesses
X-URL: https://elephly.net
X-PGP-Key: https://elephly.net/rekado.pubkey
X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
Date: Tue, 20 Apr 2021 16:51:08 +0200
Message-ID: <87v98hko0z.fsf@elephly.net>
MIME-Version: 1.0
Content-Type: text/plain; format=flowed
X-ZohoMailClient: External
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 47576
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)
merge 47576 22707
thanks

Ludo, the patch looks good to me.  However, many ibus input 
methods are not provided by the ibus package itself, so for 
ibus-anthy or ibus-libpinyin we would need a different mechanism.

Would it make sense to introduce another environment variable 
(e.g. GUIX_IBUS_COMPONENTS_PATH) that specifies a search path on 
which components are looked up?  I feel that this partially 
defeats the purpose of having a cache, so perhaps this is 
nonsensical.

What do you think?

-- 
Ricardo




Send a report that this bug log contains spam.


debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 01:56:25 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.