Dear Maintainer,

Installing this package leads to dpkg-overrides setting permissions in a
way that upowerd is unable to start under a non-root account.

This breaks default installation where DE is using UPower service: Gnome,
Mate and potentially some others.

Please consider adding a conditional or a warning prior to installation.
Tested on fully-updated Bullseye.

Hi, could you detail which permissions and from where? I'm aware of the issue
with user namespaces but not from the permissions.

There's already a small warning in the package long description, do you have
something specific in mind? Could you propose a wording?

Regards,

Hello Yves-Alexis,

Sunday, April 4, 2021, 6:09:22 PM, you wrote:

Indeed, user namespaces were to blame.

```
WARNING!

This package sets restrictive permissions on a number of directories.

While this is beneficial to the system security, it might lead to situation
where an application is unable to access a certain path.

Please use `reportbug` shall you encounter any.
```

That doesn't really look good to me. First, it seems that the issue isn't with
directory permissions here, and second, there are already a warning about
performance or usability issues.

Maybe this could be worded differently but I don't thnk it's really
sustainable to list each and every issue which might arrise with various
stuff, unfortunately.

It might be worth listing known issues and potential fixes in a specific file
in /u/s/d/hardening-runtime (README.Debian or a new file) though, if you can
propose something.

Regards,

I think the severity of this bug should really be set to critical per
debian's definitions (breaks unrelated software on the system)

In buster this package worked fine with gnome, in bullseye it breaks
other packages. This includes at lease uuidd-runtime upower and parts
of gnome (gnome settings crashes/fails to start/freezes if upower did
not start).

The only error messages talk about lack of disk space which is not accurate.

Although the fix may be simple, it's pretty frustrating and difficult
to understand.

Users like me will assume Debian has messed up gnome by not testing
things properly.

Can i request one or more of
- something in README.Debian listing packages broken by this package
and documenting how to re-enable user namespaces
- splitting setting user.max_user_namespaces into a separate package
which conflicts: uuid-runtime, upower (and anything else affected)
- put the setting of user.max_user_namespaces=0 into /etc so it's
easier to override
- have something in postinst that warns the user if upower and uuidd
are installed

Happy to help write documentation if that would help.