FS#75536 - [nfs-utils] provides file owned by nobody

Attached to Project: Arch Linux
Opened by David Runge (dvzrv) - Sunday, 07 August 2022, 17:19 GMT
Last edited by Andreas Radke (AndyRTR) - Tuesday, 09 August 2022, 20:45 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Andreas Radke (AndyRTR)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description: The package provides a file owned by nobody.

Please use systemd-tmpfiles if this file indeed should be owned by a specific user. Using nobody for this is highly discouraged from a security perspective though.

Additional info:

* nfs-utils 2.6.1-1
* https://gitlab.archlinux.org/archlinux/repod/-/issues/61

Steps to reproduce:

```
repod-file package inspect /mnt/mirror/core/os/x86_64/nfs-utils-2.6.1-1-x86_64.pkg.tar.zst
Traceback (most recent call last):
File "/usr/lib/python3.10/site-packages/repod/files/mtree.py", line 360, in from_file
MTreeEntryV1(
File "pydantic/main.py", line 341, in pydantic.main.BaseModel.__init__
pydantic.error_wrappers.ValidationError: 1 validation error for MTreeEntryV1
uid
ensure this value is less than 1000 (type=value_error.number.not_lt; limit_value=1000)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/bin/repod-file", line 8, in <module>
sys.exit(repod_file())
File "/usr/lib/python3.10/site-packages/repod/cli/cli.py", line 189, in repod_file
repod_file_package(args=args)
File "/usr/lib/python3.10/site-packages/repod/cli/cli.py", line 33, in repod_file_package
model = asyncio.run(
File "/usr/lib/python3.10/asyncio/runners.py", line 44, in run
return loop.run_until_complete(main)
File "/usr/lib/python3.10/asyncio/base_events.py", line 646, in run_until_complete
return future.result()
File "/usr/lib/python3.10/site-packages/repod/files/package.py", line 106, in from_file
mtree=MTree.from_file(
File "/usr/lib/python3.10/site-packages/repod/files/mtree.py", line 374, in from_file
raise RepoManagementValidationError(
repod.errors.RepoManagementValidationError: An error occured when validating mtree data!
Basic settings: {'type_': 'file', 'uid': 0, 'gid': 0, 'mode': '644'}
File settings: {'name': '/var/lib/nfs/state', 'time': 1642967123.0, 'mode': '600', 'uid': 65534, 'size': 0, 'md5': 'd41d8cd98f00b204e9800998ecf8427e', 'sha256': 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'}
1 validation error for MTreeEntryV1
uid
ensure this value is less than 1000 (type=value_error.number.not_lt; limit_value=1000)
```
This task depends upon

Closed by  Andreas Radke (AndyRTR)
Tuesday, 09 August 2022, 20:45 GMT
Reason for closing:  Fixed
Additional comments about closing:  2.6.2-1

Loading...