Control: found -1 3.142
Control: notfound -1 3.137
On Fri, 28 Feb 2025 at 10:21:22 +0000, Simon McVittie wrote:
On Fri, 28 Feb 2025 at 15:04:23 +0800, Dan Jacobson wrote:
Package: dbus-system-bus-common
Version: 1.16.2-1
Setting up dbus-system-bus-common (1.16.2-1) ...
warn: The home dir /nonexistent you specified can't be accessed: No such file
or directory
Insecure $ENV{ENV} while running with -T switch at
/usr/share/perl5/Debian/AdduserLogging.pm line 157.
This looks like a problem with adduser (which dbus' postinst invokes)
rather than dbus, reassigning. Full report quoted for the adduser
maintainers (unfortunately the version number of adduser was not included).
A conveniently small reproducer, demonstrating that this is not
dbus-specific:
$ podman run --rm -it debian:sid-slim
# apt update
# export ENV=/dev/null
# apt install apt-cacher-ng
...
Insecure $ENV{ENV} while running with -T switch at
/usr/share/perl5/Debian/AdduserLogging.pm line 157.
id: 'apt-cacher-ng': no such user
dpkg: error processing package apt-cacher-ng (--configure):
installed apt-cacher-ng package post-installation script subprocess returned
error exit status 1
In real life ENV would normally be set to the path to a dotfile, but
/dev/null is enough to demonstrate the problem. dbus-system-bus-common and
apt-cacher-ng are two arbitrary examples of packages that invoke adduser.
adduser 3.137 does not appear to be affected by this, it's a regression
somewhere between trixie and sid.
Unsetting $ENV{ENV} before calling system() might be a solution, or at
least a workaround.
smcv
