Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 741216 - sys-apps/opentmpfiles: does not handle 'a+' entry (was: app-crypt/tpm2-tss-3.0.0 has broken tmpfiles.d file)
Summary: sys-apps/opentmpfiles: does not handle 'a+' entry (was: app-crypt/tpm2-tss-3....
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal with 1 vote (vote)
Assignee: William Hubbs
URL:
Whiteboard:
Keywords:
: 759490 (view as bug list)
Depends on:
Blocks:
 
Reported: 2020-09-08 16:00 UTC by Lars Wendler (Polynomial-C)
Modified: 2021-07-12 20:56 UTC (History)
11 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Lars Wendler (Polynomial-C) gentoo-dev 2020-09-08 16:00:13 UTC
During boot I get the following error messages:


tmpfiles: ignoring invalid entry on line 3 of '/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf'
tmpfiles: ignoring invalid entry on line 5 of '/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf'


These are the lines in question:

> sed -n '3p;5p' /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf 
a+      /var/lib/tpm2-tss/system/keystore   -    -    -     -           default:group:tss:rwx
a+      /run/tpm2-tss/eventlog                -    -    -     -           default:group:tss:rwx
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2020-09-08 16:06:00 UTC
It's not broken and the entry is not invalid.  It's just opentmpfiles being quality Gentoo software.
Comment 2 Joonas Niilola gentoo-dev 2020-09-08 16:09:07 UTC
Just FYI, https://github.com/OpenRC/opentmpfiles/issues/5
Comment 3 Silvio 2020-09-25 07:13:31 UTC
Any news?
Comment 4 Larry the Git Cow gentoo-dev 2020-10-25 02:08:09 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1b98a2d6dc52987a23e6fcc29cfddd39216c9cdb

commit 1b98a2d6dc52987a23e6fcc29cfddd39216c9cdb
Author:     William Hubbs <williamh@gentoo.org>
AuthorDate: 2020-10-25 02:06:00 +0000
Commit:     William Hubbs <williamh@gentoo.org>
CommitDate: 2020-10-25 02:06:51 +0000

    sys-apps/opentmpfiles: 0.3 bump
    
    Closes: https://bugs.gentoo.org/741216
    Signed-off-by: William Hubbs <williamh@gentoo.org>

 sys-apps/opentmpfiles/Manifest                |  1 +
 sys-apps/opentmpfiles/opentmpfiles-0.3.ebuild | 54 +++++++++++++++++++++++++++
 2 files changed, 55 insertions(+)
Comment 5 Silvio 2020-10-28 11:15:17 UTC
Now opentmpfiles-setup doesn't start:

#/etc/init.d/opentmpfiles-setup start
* Setting up tmpfiles.d entries ...
Usage: setfacl [-bkndRLP] { -m|-M|-x|-X ... } file ...
Try `setfacl --help' for more information.
Usage: setfacl [-bkndRLP] { -m|-M|-x|-X ... } file ...
Try `setfacl --help' for more information.                                [ !! ]
 * ERROR: opentmpfiles-setup failed to start
Comment 6 Larry the Git Cow gentoo-dev 2020-10-30 08:27:02 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5b4408fdf598965cb3d49152c11427487821a93b

commit 5b4408fdf598965cb3d49152c11427487821a93b
Author:     Georgy Yakovlev <gyakovlev@gentoo.org>
AuthorDate: 2020-10-30 08:24:58 +0000
Commit:     Georgy Yakovlev <gyakovlev@gentoo.org>
CommitDate: 2020-10-30 08:26:42 +0000

    profiles/package.mask: mask latest opentmpfiles for more testing
    
    Bug: https://bugs.gentoo.org/751739
    Bug: https://bugs.gentoo.org/741216
    Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org>

 profiles/package.mask | 6 ++++++
 1 file changed, 6 insertions(+)
Comment 7 Georgy Yakovlev archtester gentoo-dev 2020-10-30 08:27:23 UTC
re-opening, as new opentmpfiles still broken.
Comment 8 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-11-21 21:42:36 UTC
ping, any update?
Comment 9 Christopher Byrne 2020-12-19 03:09:34 UTC
*** Bug 759490 has been marked as a duplicate of this bug. ***
Comment 10 Hank Leininger 2021-01-12 21:27:56 UTC
FWIW hit this again the other day; afaik the only solutions are to mask recent tpm2-tss (don't remember if that conflicts with other things?) or complete the migration to systemd-tmpfiles.
Comment 11 Silvio 2021-07-12 09:43:44 UTC
Now the situation is messy.

opentmpfiles is masked according to:

- sys-apps/opentmpfiles-0.2::gentoo (masked by: package.mask)
/usr/portage/profiles/base/package.mask:
# Andreas K. Hüttel <dilfridge@gentoo.org> (2021-07-06)
# Root privilege escalation, CVE-2017-18925, bug 751415


however if you instal it you got the usual error message when starting each of the two services.

With:

/etc/init.d/opentmpfiles-setup start
or
/etc/init.d/opentmpfiles-dev start

you get




# /etc/init.d/opentmpfiles-setup start

 * Caching service dependencies ...                                                                                                        [ ok ]
 * Setting up tmpfiles.d entries ...
tmpfiles: ignoring invalid entry on line 3 of `/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf'
tmpfiles: ignoring invalid entry on line 5 of `/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf'                                                     [ !! ]
 * ERROR: opentmpfiles-setup failed to start



# /etc/init.d/opentmpfiles-dev start

 * Caching service dependencies ...                                                                                                        [ ok ]
 * Setting up tmpfiles.d entries for /dev ...
tmpfiles: ignoring invalid entry on line 3 of `/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf'
tmpfiles: ignoring invalid entry on line 5 of `/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf'                                                     [ !! ]
 * ERROR: opentmpfiles-dev failed to start



I think I can't remove it as 



# equery d opentmpfiles

 * These packages depend on opentmpfiles:
virtual/tmpfiles-0-r1 (sys-apps/opentmpfiles)


AND

# equery d tmpfiles
 * These packages depend on tmpfiles:
app-admin/sudo-1.9.7_p1-r1 (virtual/tmpfiles)
app-crypt/tpm2-tss-3.1.0 (virtual/tmpfiles)
app-emulation/virtualbox-6.1.22 (virtual/tmpfiles)
app-laptop/laptop-mode-tools-1.74 (virtual/tmpfiles)
app-misc/screen-4.8.0-r3 (virtual/tmpfiles)
app-portage/eix-0.35.2 (virtual/tmpfiles)
dev-db/mysql-init-scripts-2.3-r3 (virtual/tmpfiles)
dev-db/postgresql-13.3 (virtual/tmpfiles)
dev-db/redis-6.2.4 (virtual/tmpfiles)
dev-libs/cyrus-sasl-2.1.27-r4 (virtual/tmpfiles)
dev-libs/kpathsea-6.3.3_p20210325 (virtual/tmpfiles)
media-sound/pulseaudio-13.0-r1 (virtual/tmpfiles)
net-nds/openldap-2.4.59-r1 (virtual/tmpfiles)
sys-apps/openrc-0.43.3 (virtual/tmpfiles)
Comment 12 Joakim Tjernlund 2021-07-12 10:02:43 UTC
virtual/tmpfiles has
RDEPEND="
	|| (
		sys-apps/systemd-tmpfiles
		sys-apps/opentmpfiles
		sys-apps/systemd
	)"

Just switch to sys-apps/systemd-tmpfiles will fix this problem
Comment 13 Silvio 2021-07-12 10:10:34 UTC
(In reply to Joakim Tjernlund from comment #12)

> 
> Just switch to sys-apps/systemd-tmpfiles will fix this problem

How can I do this? Just installing systemd-tmpfiles and removing opentmpfiles?
Comment 14 Joakim Tjernlund 2021-07-12 12:43:20 UTC
(In reply to Silvio from comment #13)
> (In reply to Joakim Tjernlund from comment #12)
> 
> > 
> > Just switch to sys-apps/systemd-tmpfiles will fix this problem
> 
> How can I do this? Just installing systemd-tmpfiles and removing
> opentmpfiles?

Yes, systemd-tmpfiles is a replacement for opentmpfiles
systemd-tmpfiles is extracted from systemd but does not depend on systemd
so you can use it with openrc. I did this a while back