Package: lttng-tools
Version: 2.13.9-1+b1
Severity: normal

Dear Maintainer,

the package contains a systemd service lttng-sessiond, which auto-starts
and by that loads lttng kernel modules (e.g. lttng_kretprobes). This is
problematic, as these are out-of-tree modules which taint the kernel.
Also it does not work if the modules are not installed or cannot be
loaded (e.g. due to secure boot / kernel lockdown).

I hereby recommend to install that service but do not enable it. If a
user wants to debug with lttng, it can be started on demand.

Best regards,
Felix Moessbauer
Siemens AG

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.10-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lttng-tools depends on:
ii  init-system-helpers      1.68
ii  libc6                    2.40-6
ii  libkmod2                 33+20240816-2
pn  liblttng-ctl0t64         <none>
ii  liblttng-ust-common1t64  2.13.8-2+b1
ii  liblttng-ust-ctl5t64     2.13.8-2+b1
ii  libpopt0                 1.19+dfsg-2
ii  liburcu8t64              0.14.1-1
ii  libxml2                  2.12.7+dfsg+really2.9.14-0.2+b1

Versions of packages lttng-tools recommends:
pn  babeltrace2  <none>

Versions of packages lttng-tools suggests:
pn  lttng-modules-dkms  <none>

Reply via email to