Hi, running the latest lintian version against systemd, I get E: systemd: custom-library-search-path bin/loginctl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/networkctl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemctl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemd-ask-password RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemd-escape RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemd-inhibit RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemd-machine-id-setup RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemd-notify RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemd-sysext RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemd-sysusers RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemd-tmpfiles RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path bin/systemd-tty-ask-password-agent RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-bless-boot-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-cryptsetup-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-debug-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-fstab-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-getty-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-gpt-auto-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-hibernate-resume-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-rc-local-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-run-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-system-update-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-sysv-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/system-generators/systemd-veritysetup-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-ac-power RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-backlight RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-binfmt RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-bless-boot RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-boot-check-no-failures RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-cgroups-agent RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-cryptsetup RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-fsck RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-fsckd RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-growfs RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-hibernate-resume RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-hostnamed RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-initctl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-journald RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-localed RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-logind RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-makefs RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-modules-load RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-network-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-networkd RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-networkd-wait-online RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-pstore RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-quotacheck RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-random-seed RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-remount-fs RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-reply-password RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-resolved RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-rfkill RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-shutdown RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-sleep RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-socket-proxyd RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-sulogin-shell RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-sysctl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-time-wait-sync RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-timedated RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-update-utmp RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-user-runtime-dir RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-user-sessions RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-veritysetup RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-volatile-root RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path lib/systemd/systemd-xdg-autostart-condition RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/bootctl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/busctl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/hostnamectl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/localectl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/resolvectl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-analyze RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-cat RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-cgls RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-cgtop RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-cryptenroll RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-delta RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-detect-virt RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-id128 RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-mount RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-path RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-run RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-socket-activate RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/systemd-stdio-bridge RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/bin/timedatectl RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/lib/systemd/user-environment-generators/30-systemd-environment-d-generator RUNPATH lib/systemd/ N: E: systemd: custom-library-search-path usr/lib/systemd/user-generators/systemd-xdg-autostart-generator RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path bin/machinectl RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path bin/portablectl RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path lib/systemd/systemd-export RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path lib/systemd/systemd-import RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path lib/systemd/systemd-import-fs RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path lib/systemd/systemd-importd RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path lib/systemd/systemd-machined RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path lib/systemd/systemd-portabled RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path lib/systemd/systemd-pull RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path usr/bin/systemd-dissect RUNPATH lib/systemd/ N: E: systemd-container: custom-library-search-path usr/bin/systemd-nspawn RUNPATH lib/systemd/ N: E: systemd-coredump: custom-library-search-path lib/systemd/systemd-coredump RUNPATH lib/systemd/ N: E: systemd-coredump: custom-library-search-path usr/bin/coredumpctl RUNPATH lib/systemd/ N: E: systemd-journal-remote: custom-library-search-path lib/systemd/systemd-journal-gatewayd RUNPATH lib/systemd/ N: E: systemd-journal-remote: custom-library-search-path lib/systemd/systemd-journal-remote RUNPATH lib/systemd/ N: E: systemd-journal-remote: custom-library-search-path lib/systemd/systemd-journal-upload RUNPATH lib/systemd/ N: E: systemd-timesyncd: custom-library-search-path lib/systemd/systemd-timesyncd RUNPATH lib/systemd/ This is a regression, lintian from bullseye does not flag this as an error and I don't see this as an error either. All systemd binaries use the private shared library /lib/systemd/libsystemd-shared-$VER.so and therefor set the RUNPATH accordingly. Regards, Michael
Hello, Bug #996270 in lintian reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/lintian/lintian/-/commit/1b8f469335f8cd762937e070ff5e2e9b7e9712ab This regression was introduced when two similar legacy checks, called binaries and shared-libs, were split into over thirty smaller checks. [1][2] The two old checks shared a similar subject matter and had become hard to maintain. The split grouped related tags together and radically reduced the complexity and the nesting depths of the conditionals. This commit adds 'lib' to the base folders for package-private paths allowed in the shared library loader's search path. Somehow, it was omitted previously. As can be seen below, the offending tag is now gone. Thanks to Michael Biebl for bringing the matter to our attention! * * * ➤ bin/lintian /mirror/debian/pool/main/s/systemd/systemd_249.4-1_amd64.deb W: systemd: appstream-metadata-missing-modalias-provide lib/udev/rules.d/70-uaccess.rules W: systemd: appstream-metadata-missing-modalias-provide lib/udev/rules.d/71-seat.rules W: systemd: appstream-metadata-missing-modalias-provide lib/udev/rules.d/71-seat.rules:61 match rule usb:v058Fp6254d* W: systemd: appstream-metadata-missing-modalias-provide ... use --no-tag-display-limit to see all (or pipe to a file/program) W: systemd: executable-not-elf-or-script usr/lib/systemd/boot/efi/linuxx64.efi.stub W: systemd: executable-not-elf-or-script usr/lib/systemd/boot/efi/systemd-bootx64.efi W: systemd: groff-message usr/share/man/man5/systemd.exec.5.gz (line 1) 1411: warning [p 12, 5.7i, div '3tbd5,3', 0.0i]: can't break line W: systemd: groff-message usr/share/man/man5/systemd.exec.5.gz (line 2) 4168: warning [p 26, 19.2i, div '3tbd12,2', 0.3i]: can't break line W: systemd: groff-message usr/share/man/man5/systemd.exec.5.gz (line 3) 4189: warning [p 26, 19.2i, div '3tbd15,2', 0.2i]: can't break line W: systemd: groff-message ... use --no-tag-display-limit to see all (or pipe to a file/program) W: systemd: no-manual-page usr/bin/systemd-stdio-bridge W: systemd: shared-library-lacks-prerequisites usr/lib/systemd/boot/efi/linuxx64.elf.stub I: systemd: hardening-no-fortify-functions lib/systemd/system-generators/systemd-bless-boot-generator I: systemd: hardening-no-fortify-functions lib/systemd/system-generators/systemd-getty-generator I: systemd: hardening-no-fortify-functions lib/systemd/system-generators/systemd-rc-local-generator I: systemd: hardening-no-fortify-functions ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: package-contains-empty-directory lib/systemd/system-shutdown/ I: systemd: package-contains-empty-directory lib/systemd/system-sleep/ I: systemd: package-contains-empty-directory lib/systemd/system/local-fs.target.wants/ I: systemd: package-contains-empty-directory ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: package-supports-alternative-init-but-no-init.d-script lib/systemd/system/console-getty.service I: systemd: package-supports-alternative-init-but-no-init.d-script lib/systemd/system/cryptdisks-early.service I: systemd: package-supports-alternative-init-but-no-init.d-script lib/systemd/system/cryptdisks.service I: systemd: package-supports-alternative-init-but-no-init.d-script ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: spare-manual-page usr/share/man/man1/resolvconf.1.gz I: systemd: spare-manual-page usr/share/man/man8/30-systemd-environment-d-generator.8.gz I: systemd: spare-manual-page usr/share/man/man8/rc-local.service.8.gz I: systemd: spelling-error-in-binary lib/systemd/libsystemd-shared-249.so anually annually I: systemd: spelling-error-in-binary lib/systemd/systemd-networkd iif if I: systemd: systemd-service-file-missing-documentation-key lib/systemd/system/getty-static.service I: systemd: systemd-service-file-missing-documentation-key lib/systemd/system/getty.target.wants/getty-static.service I: systemd: systemd-service-file-missing-documentation-key lib/systemd/system/initrd-cleanup.service I: systemd: systemd-service-file-missing-documentation-key ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: systemd-service-file-missing-install-key lib/systemd/system/dbus-org.freedesktop.hostname1.service I: systemd: systemd-service-file-missing-install-key lib/systemd/system/dbus-org.freedesktop.locale1.service I: systemd: systemd-service-file-missing-install-key lib/systemd/system/dbus-org.freedesktop.login1.service I: systemd: systemd-service-file-missing-install-key ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: typo-in-manual-page usr/share/man/man5/org.freedesktop.resolve1.5.gz line 478 "allows to" "allows one to" I: systemd: typo-in-manual-page usr/share/man/man5/systemd.netdev.5.gz line 1654 "allows to" "allows one to" I: systemd: typo-in-manual-page usr/share/man/man5/systemd.network.5.gz line 1835 "Allows to" "Allows one to" I: systemd: typo-in-manual-page ... use --no-tag-display-limit to see all (or pipe to a file/program) P: systemd: executable-in-usr-lib usr/lib/kernel/install.d/00-entry-directory.install P: systemd: executable-in-usr-lib usr/lib/kernel/install.d/50-depmod.install P: systemd: executable-in-usr-lib usr/lib/kernel/install.d/85-initrd.install P: systemd: executable-in-usr-lib ... use --no-tag-display-limit to see all (or pipe to a file/program) X: systemd: portable-executable-missing-security-features usr/lib/systemd/boot/efi/linuxx64.efi.stub ASLR DEP/NX X: systemd: portable-executable-missing-security-features usr/lib/systemd/boot/efi/systemd-bootx64.efi ASLR DEP/NX X: systemd: systemd-service-file-missing-hardening-features lib/systemd/system/autovt@.service X: systemd: systemd-service-file-missing-hardening-features lib/systemd/system/console-getty.service X: systemd: systemd-service-file-missing-hardening-features lib/systemd/system/container-getty@.service X: systemd: systemd-service-file-missing-hardening-features ... use --no-tag-display-limit to see all (or pipe to a file/program) O: systemd: maintainer-script-calls-systemctl postinst:23 O: systemd: maintainer-script-calls-systemctl postinst:24 O: systemd: maintainer-script-calls-systemctl postinst:29 O: systemd: maintainer-script-calls-systemctl ... use --no-tag-display-limit to see all (or pipe to a file/program) ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/996270
We believe that the bug you reported is fixed in the latest version of
lintian, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 996270@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Chris Lamb <lamby@debian.org> (supplier of updated lintian package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 15 Oct 2021 08:01:45 +0000
Source: lintian
Architecture: source
Version: 2.109.0
Distribution: unstable
Urgency: medium
Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 994902 995490 995498 995981 995991 996093 996111 996270
Changes:
lintian (2.109.0) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- redundant-build-prerequisites
- redundant-control-relation
+ Removed:
- duplicate-in-relation-field
- package-has-a-duplicate-build-relation
.
[ Felix Lechner ]
* Do not complain about library sections that do not exist.
(Closes: #995991)
* Python :any handling:
* In tag descriptions, never ask for :any in Python prerequisites.
(Re: #995498)
* Fix processing of the :any multiarch acceptor in package
relationships. (Closes: #995490, #995498)
* Allow make:any as a prerequisite for using usr/bin/make in scripts.
(Closes: #994902)
* Make the condition of a missing interpreter look less like
a recommendation.
* Fix non-sensical line lengths in hints from cruft check.
(Closes: #996111)
* Add a new Lenna image to the list of banned files. (Closes: #996093)
* Also allow private folders in lib from custom library search path.
(Closes: #996270)
* Clarify in tag descriptions for debian/rules check that hint context is
not a recommendation. (Closes: #995981)
Checksums-Sha1:
148e6542a76294d915a9d50c7c7ce691cf9feb10 2486 lintian_2.109.0.dsc
7018ec87b22ae2062ccf447646a0abed75174c52 2073516 lintian_2.109.0.tar.xz
62b117376aa1eeabacc42a7c67315569c8a1b249 6550 lintian_2.109.0_amd64.buildinfo
Checksums-Sha256:
c5750dd7e890e62e26ee9bf8d89f288cdd3ae5265c4d99ad49a852debb33f6df 2486 lintian_2.109.0.dsc
f7ff3fa2938867205abba4fc4e8b35a6323c59cf941e7a364faf94edce087712 2073516 lintian_2.109.0.tar.xz
a6fcdc1603495c1cf0f8871a7b9d5a47d0c7f98872d68401819a0a17d959e230 6550 lintian_2.109.0_amd64.buildinfo
Files:
ac747a8841f0332a39f0920558db507a 2486 devel optional lintian_2.109.0.dsc
33a5984b04f930f603d19ea953e1bf3c 2073516 devel optional lintian_2.109.0.tar.xz
5db56713a4a53543a8b129b0848bfc22 6550 devel optional lintian_2.109.0_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=rjRD
-----END PGP SIGNATURE-----
Hi, I apparently get similar errors with strongSwan: E: charon-cmd: custom-library-search-path usr/sbin/charon-cmd RUNPATH usr/lib/ipsec/ This wasn't present before the recent lintian update. I'm using lintian 2.109.0 so I'm a bit confused about why it still happens. Maybe because it expects stuff to be in /usr/lib/<package> but IKE/IPsec daemons use that folder since ages. Regards,
Hello, Bug #996270 in lintian reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/lintian/lintian/-/commit/1b8f469335f8cd762937e070ff5e2e9b7e9712ab This regression was introduced when two similar legacy checks, called binaries and shared-libs, were split into over thirty smaller checks. [1][2] The two old checks shared a similar subject matter and had become hard to maintain. The split grouped related tags together and radically reduced the complexity and the nesting depths of the conditionals. This commit adds 'lib' to the base folders for package-private paths allowed in the shared library loader's search path. Somehow, it was omitted previously. As can be seen below, the offending tag is now gone. Thanks to Michael Biebl for bringing the matter to our attention! * * * ➤ bin/lintian /mirror/debian/pool/main/s/systemd/systemd_249.4-1_amd64.deb W: systemd: appstream-metadata-missing-modalias-provide lib/udev/rules.d/70-uaccess.rules W: systemd: appstream-metadata-missing-modalias-provide lib/udev/rules.d/71-seat.rules W: systemd: appstream-metadata-missing-modalias-provide lib/udev/rules.d/71-seat.rules:61 match rule usb:v058Fp6254d* W: systemd: appstream-metadata-missing-modalias-provide ... use --no-tag-display-limit to see all (or pipe to a file/program) W: systemd: executable-not-elf-or-script usr/lib/systemd/boot/efi/linuxx64.efi.stub W: systemd: executable-not-elf-or-script usr/lib/systemd/boot/efi/systemd-bootx64.efi W: systemd: groff-message usr/share/man/man5/systemd.exec.5.gz (line 1) 1411: warning [p 12, 5.7i, div '3tbd5,3', 0.0i]: can't break line W: systemd: groff-message usr/share/man/man5/systemd.exec.5.gz (line 2) 4168: warning [p 26, 19.2i, div '3tbd12,2', 0.3i]: can't break line W: systemd: groff-message usr/share/man/man5/systemd.exec.5.gz (line 3) 4189: warning [p 26, 19.2i, div '3tbd15,2', 0.2i]: can't break line W: systemd: groff-message ... use --no-tag-display-limit to see all (or pipe to a file/program) W: systemd: no-manual-page usr/bin/systemd-stdio-bridge W: systemd: shared-library-lacks-prerequisites usr/lib/systemd/boot/efi/linuxx64.elf.stub I: systemd: hardening-no-fortify-functions lib/systemd/system-generators/systemd-bless-boot-generator I: systemd: hardening-no-fortify-functions lib/systemd/system-generators/systemd-getty-generator I: systemd: hardening-no-fortify-functions lib/systemd/system-generators/systemd-rc-local-generator I: systemd: hardening-no-fortify-functions ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: package-contains-empty-directory lib/systemd/system-shutdown/ I: systemd: package-contains-empty-directory lib/systemd/system-sleep/ I: systemd: package-contains-empty-directory lib/systemd/system/local-fs.target.wants/ I: systemd: package-contains-empty-directory ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: package-supports-alternative-init-but-no-init.d-script lib/systemd/system/console-getty.service I: systemd: package-supports-alternative-init-but-no-init.d-script lib/systemd/system/cryptdisks-early.service I: systemd: package-supports-alternative-init-but-no-init.d-script lib/systemd/system/cryptdisks.service I: systemd: package-supports-alternative-init-but-no-init.d-script ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: spare-manual-page usr/share/man/man1/resolvconf.1.gz I: systemd: spare-manual-page usr/share/man/man8/30-systemd-environment-d-generator.8.gz I: systemd: spare-manual-page usr/share/man/man8/rc-local.service.8.gz I: systemd: spelling-error-in-binary lib/systemd/libsystemd-shared-249.so anually annually I: systemd: spelling-error-in-binary lib/systemd/systemd-networkd iif if I: systemd: systemd-service-file-missing-documentation-key lib/systemd/system/getty-static.service I: systemd: systemd-service-file-missing-documentation-key lib/systemd/system/getty.target.wants/getty-static.service I: systemd: systemd-service-file-missing-documentation-key lib/systemd/system/initrd-cleanup.service I: systemd: systemd-service-file-missing-documentation-key ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: systemd-service-file-missing-install-key lib/systemd/system/dbus-org.freedesktop.hostname1.service I: systemd: systemd-service-file-missing-install-key lib/systemd/system/dbus-org.freedesktop.locale1.service I: systemd: systemd-service-file-missing-install-key lib/systemd/system/dbus-org.freedesktop.login1.service I: systemd: systemd-service-file-missing-install-key ... use --no-tag-display-limit to see all (or pipe to a file/program) I: systemd: typo-in-manual-page usr/share/man/man5/org.freedesktop.resolve1.5.gz line 478 "allows to" "allows one to" I: systemd: typo-in-manual-page usr/share/man/man5/systemd.netdev.5.gz line 1654 "allows to" "allows one to" I: systemd: typo-in-manual-page usr/share/man/man5/systemd.network.5.gz line 1835 "Allows to" "Allows one to" I: systemd: typo-in-manual-page ... use --no-tag-display-limit to see all (or pipe to a file/program) P: systemd: executable-in-usr-lib usr/lib/kernel/install.d/00-entry-directory.install P: systemd: executable-in-usr-lib usr/lib/kernel/install.d/50-depmod.install P: systemd: executable-in-usr-lib usr/lib/kernel/install.d/85-initrd.install P: systemd: executable-in-usr-lib ... use --no-tag-display-limit to see all (or pipe to a file/program) X: systemd: portable-executable-missing-security-features usr/lib/systemd/boot/efi/linuxx64.efi.stub ASLR DEP/NX X: systemd: portable-executable-missing-security-features usr/lib/systemd/boot/efi/systemd-bootx64.efi ASLR DEP/NX X: systemd: systemd-service-file-missing-hardening-features lib/systemd/system/autovt@.service X: systemd: systemd-service-file-missing-hardening-features lib/systemd/system/console-getty.service X: systemd: systemd-service-file-missing-hardening-features lib/systemd/system/container-getty@.service X: systemd: systemd-service-file-missing-hardening-features ... use --no-tag-display-limit to see all (or pipe to a file/program) O: systemd: maintainer-script-calls-systemctl postinst:23 O: systemd: maintainer-script-calls-systemctl postinst:24 O: systemd: maintainer-script-calls-systemctl postinst:29 O: systemd: maintainer-script-calls-systemctl ... use --no-tag-display-limit to see all (or pipe to a file/program) ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/996270
Hello, Bug #996270 in lintian reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/lintian/lintian/-/commit/b3c414b5dd0888aaf3060516c70c2d0cd74c443a ------------------------------------------------------------------------ Merge tag '2.109.0' into bullseye-backports Release lintian/2.109.0 into unstable. Format: 1.8 Date: Fri, 15 Oct 2021 08:01:45 +0000 Source: lintian Architecture: source Version: 2.109.0 Distribution: unstable Urgency: medium Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 994902 995490 995498 995981 995991 996093 996111 996270 Changes: lintian (2.109.0) unstable; urgency=medium . * Summary of tag changes: + Added: - redundant-build-prerequisites - redundant-control-relation + Removed: - duplicate-in-relation-field - package-has-a-duplicate-build-relation . [ Felix Lechner ] * Do not complain about library sections that do not exist. (Closes: #995991) * Python :any handling: * In tag descriptions, never ask for :any in Python prerequisites. (Re: #995498) * Fix processing of the :any multiarch acceptor in package relationships. (Closes: #995490, #995498) * Allow make:any as a prerequisite for using usr/bin/make in scripts. (Closes: #994902) * Make the condition of a missing interpreter look less like a recommendation. * Fix non-sensical line lengths in hints from cruft check. (Closes: #996111) * Add a new Lenna image to the list of banned files. (Closes: #996093) * Also allow private folders in lib from custom library search path. (Closes: #996270) * Clarify in tag descriptions for debian/rules check that hint context is not a recommendation. (Closes: #995981) Checksums-Sha1: 1d035b03f7a5aae6a8b0cda88552fe038f2510dd 1603 lintian_2.109.0.dsc 7018ec87b22ae2062ccf447646a0abed75174c52 2073516 lintian_2.109.0.tar.xz 550b2e46141fc2f64ac556b52d05a8fe86470ec8 5667 lintian_2.109.0_amd64.buildinfo Checksums-Sha256: 9400371c013d12eccf410df1d6ac02596979c30d7a57823e9c65de31c7ce660c 1603 lintian_2.109.0.dsc f7ff3fa2938867205abba4fc4e8b35a6323c59cf941e7a364faf94edce087712 2073516 lintian_2.109.0.tar.xz ad0c0beb81a07bcfb826531904f5244d9fbc0305f971338aa75ab91a43907cc0 5667 lintian_2.109.0_amd64.buildinfo Files: 8b0de9f80ca2796f9f6c7fdd765fdd2a 1603 devel optional lintian_2.109.0.dsc 33a5984b04f930f603d19ea953e1bf3c 2073516 devel optional lintian_2.109.0.tar.xz 6f1c15fdfd64b0701536fee60d56f4f5 5667 devel optional lintian_2.109.0_amd64.buildinfo * tag '2.109.0': (35 commits) Release lintian/2.109.0 into unstable. Adjust expected hints in a test to the new tag context. Also allow private folders in lib from custom library search path. (Closes: #996270) Add a new Lenna image to the list of banned files; expand name expression. (Closes: #996093) Fix non-sensical line lengths in hints from cruft check. (Closes: #996111) Clarify in tag descriptions for debian/rules check that hint context is not a recommendation. (Closes: #995981) Make the condition of a missing interpreter prerequisite look less like a recommendation. Allow make:any as a prerequisite for using usr/bin/make in scripts. (Closes: #994902) Fix processing of the :any multiarch acceptor in package relationships. (Closes: #995490, #995498) Rename method identifying redundancies among packaging relationships accordingly; two tags too. When one declared package relationship satisfies a stated condition, name the method so. In tag descriptions, never ask for :any in Python prerequisites. (See: #995498) Do not complain about library sections that do not exist. (Closes: #995991) Use public Moo accessors everywhere. (See: #990751) Open new changelog entry. Release lintian/2.108.0 into unstable. Drop old hooks from Lintian::Check; no longer used anywhere including pkg-js-tools. Migrate 'setup' entry points in checks to lazy Moo attributes; merge 'breakdown' into $type. Bring systemd check closer to current code standards; split off one check. Drop processing of obsolete '.include' directives in system service files. ... ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/996270
Hello, Bug #996270 in lintian reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/lintian/lintian/-/commit/b3c414b5dd0888aaf3060516c70c2d0cd74c443a ------------------------------------------------------------------------ Merge tag '2.109.0' into bullseye-backports Release lintian/2.109.0 into unstable. Format: 1.8 Date: Fri, 15 Oct 2021 08:01:45 +0000 Source: lintian Architecture: source Version: 2.109.0 Distribution: unstable Urgency: medium Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 994902 995490 995498 995981 995991 996093 996111 996270 Changes: lintian (2.109.0) unstable; urgency=medium . * Summary of tag changes: + Added: - redundant-build-prerequisites - redundant-control-relation + Removed: - duplicate-in-relation-field - package-has-a-duplicate-build-relation . [ Felix Lechner ] * Do not complain about library sections that do not exist. (Closes: #995991) * Python :any handling: * In tag descriptions, never ask for :any in Python prerequisites. (Re: #995498) * Fix processing of the :any multiarch acceptor in package relationships. (Closes: #995490, #995498) * Allow make:any as a prerequisite for using usr/bin/make in scripts. (Closes: #994902) * Make the condition of a missing interpreter look less like a recommendation. * Fix non-sensical line lengths in hints from cruft check. (Closes: #996111) * Add a new Lenna image to the list of banned files. (Closes: #996093) * Also allow private folders in lib from custom library search path. (Closes: #996270) * Clarify in tag descriptions for debian/rules check that hint context is not a recommendation. (Closes: #995981) Checksums-Sha1: 1d035b03f7a5aae6a8b0cda88552fe038f2510dd 1603 lintian_2.109.0.dsc 7018ec87b22ae2062ccf447646a0abed75174c52 2073516 lintian_2.109.0.tar.xz 550b2e46141fc2f64ac556b52d05a8fe86470ec8 5667 lintian_2.109.0_amd64.buildinfo Checksums-Sha256: 9400371c013d12eccf410df1d6ac02596979c30d7a57823e9c65de31c7ce660c 1603 lintian_2.109.0.dsc f7ff3fa2938867205abba4fc4e8b35a6323c59cf941e7a364faf94edce087712 2073516 lintian_2.109.0.tar.xz ad0c0beb81a07bcfb826531904f5244d9fbc0305f971338aa75ab91a43907cc0 5667 lintian_2.109.0_amd64.buildinfo Files: 8b0de9f80ca2796f9f6c7fdd765fdd2a 1603 devel optional lintian_2.109.0.dsc 33a5984b04f930f603d19ea953e1bf3c 2073516 devel optional lintian_2.109.0.tar.xz 6f1c15fdfd64b0701536fee60d56f4f5 5667 devel optional lintian_2.109.0_amd64.buildinfo * tag '2.109.0': (35 commits) Release lintian/2.109.0 into unstable. Adjust expected hints in a test to the new tag context. Also allow private folders in lib from custom library search path. (Closes: #996270) Add a new Lenna image to the list of banned files; expand name expression. (Closes: #996093) Fix non-sensical line lengths in hints from cruft check. (Closes: #996111) Clarify in tag descriptions for debian/rules check that hint context is not a recommendation. (Closes: #995981) Make the condition of a missing interpreter prerequisite look less like a recommendation. Allow make:any as a prerequisite for using usr/bin/make in scripts. (Closes: #994902) Fix processing of the :any multiarch acceptor in package relationships. (Closes: #995490, #995498) Rename method identifying redundancies among packaging relationships accordingly; two tags too. When one declared package relationship satisfies a stated condition, name the method so. In tag descriptions, never ask for :any in Python prerequisites. (See: #995498) Do not complain about library sections that do not exist. (Closes: #995991) Use public Moo accessors everywhere. (See: #990751) Open new changelog entry. Release lintian/2.108.0 into unstable. Drop old hooks from Lintian::Check; no longer used anywhere including pkg-js-tools. Migrate 'setup' entry points in checks to lazy Moo attributes; merge 'breakdown' into $type. Bring systemd check closer to current code standards; split off one check. Drop processing of obsolete '.include' directives in system service files. ... ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/996270
Hi,
The relevant portion of the old binaries check may not have run for
your package previously. We replaced this code, which was part of a
large check :
- # rpath is disallowed, except in private directories
- if (exists $objdump->{RPATH} || exists $objdump->{RUNPATH}) {
-
- my @rpaths
- = (keys %{$objdump->{RPATH}}, keys %{$objdump->{RUNPATH}});
-
- for my $rpath (map {File::Spec->canonpath($_)}@rpaths) {
-
- my $installable_name = $self->processable->name;
- my $source_name = $self->processable->source_name;
-
- my $madir = $self->DEB_HOST_MULTIARCH->{$architecture};
- return
- unless length $madir;
-
- return
- if $rpath
- =~
m{^/usr/lib/(?:$madir/)?(?:games/)?(?:\Q$installable_name\E|\Q$source_name\E)(?:/|\z)};
-
- return
- if $self->private_directories->{$rpath}
- && $rpath !~ m{^(?:/usr)?/lib(?:/$madir)?/?\z};
-
- return
- if $rpath =~ m{^\$\{?ORIGIN\}?};
-
- # GHC in Debian uses a scheme for RPATH. (#914873)
- return
- if $rpath =~ m{^/usr/lib/ghc/};
-
- $self->hint('custom-library-search-path', $item, $rpath);
- }
- }
with this self-contained file: [1]
+ for my $section (qw{RPATH RUNPATH}) {
+
+ my @rpaths = keys %{$objdump->{$section} // {}};
+
+ my @no_origin = grep { !m{^ \$ \{? ORIGIN \}? }x } @rpaths;
+
+ my @canonical = map { File::Spec->canonpath($_) } @no_origin;
+
+ my @normalized;
+ for my $path (@canonical) {
+
+ $path =~ s{^/}{};
+ $path .= $SLASH
+ unless $path =~ m{/\z};
+
+ push(@normalized, $path);
+ }
+
+ my @custom;
+ for my $folder (@normalized) {
+
+ # for shipped folders, would have to disallow system locations
+ next
+ if any { $folder =~ m{^\Q$_\E} } @{$self->private_folders};
+
+ # GHC in Debian uses a scheme for RPATH (#914873)
+ next
+ if $folder =~ m{^usr/lib/ghc/};
+
+ push(@custom, $folder);
+ }
+
+ $self->hint('custom-library-search-path', $item, $section, $_)
+ for @custom;
+ }
I believe we only disabled the use of /usr/lib/${installable_name} in
favor of /usr/lib/${source_name}. (I think I was unable to find
packages using that exemption.) Is your package affected by that
change?
The commit [2] reduced the nesting depth and the complexity of the
conditionals. It is therefore possible that the relevant portion of
the check did not previously run for your package.
Kind regards
Felix Lechner
[1] https://salsa.debian.org/lintian/lintian/-/blob/master/lib/Lintian/Check/Binaries/Rpath.pm
[2] https://salsa.debian.org/lintian/lintian/-/commit/7a389940a560f556d0e240481f00302499a1fc66
Actually I've double-checked and I previously had an override for binary-or- shlib-defines-rpath which has been “replaced” by the new ones. I've adjusted the overrides for now. I think it'd be nice to have a way to express that there's a generic/accepted RPATH for a package (which might be different than the source name), but for now the overrides works for that. Thanks for the reply anyway. Regards,
Hi, Great! I will close this bug for the time being. Please open another one, if needed. I am not sure Debian's position is particularly accommodating [1] but I am happy to entertain any proposal. At the time of writing, 938 sources generated installables that ship shared objects with custom search paths. [2] Kind regards Felix Lechner [1] https://wiki.debian.org/RpathIssue [2] https://lintian.debian.org/tags/custom-library-search-path
That page doesn't apparently mention the term 'plugin', which I think is one good reason to set the runpath on a binary, though :) Regards,
Hi, Maybe you could add it to the Wiki page, if you have time. Thanks! Kind regards, Felix Lechner
Looks like this is not fully fixed yet. Just saw this for the network- manager package [1] E custom-library-search-path RUNPATH /usr/lib/x86_64-linux- gnu/NetworkManager/1.32.12 [usr/lib/x86_64-linux- gnu/NetworkManager/1.32.12/libnm-device-plugin-bluetooth.so] E custom-library-search-path RUNPATH /usr/lib/x86_64-linux- gnu/NetworkManager/1.32.12 [usr/lib/x86_64-linux- gnu/NetworkManager/1.32.12/libnm-device-plugin-wwan.so] Should we reopen this bug report or open a new one? [1] https://lintian.debian.org/sources/network-manager
Hi, The subfolder is not named after the package name (due to camel case). Should I allow all subfolders? Kind regards Felix Lechner
Good question. But I guess if that subfolder comes from the same package, it imo doesn't really matter how exactly it is named?
If it's just the camel case (and not the - in the middle as well that is lacking in the folder name), perhaps allow for case-insensitive matches? I think that would be fair here.