Control: severity -1 normal ¡Hola Konomi! El 2019-09-05 a las 01:14 +1000, Konomi escribió:
Package: sddm Version: 0.18.0-1 Severity: grave Tags: upstream Justification: renders package unusable
Quoting the upstream bug report:
"sddm-greeter needs execution rights at /var/lib/sddm/.cache/sddm-greeter/qmlcache/*.qmlc. krunner needs execution at /home/user/.cache/krunner/qmlcache/*.qmlc. It breaks when /var and /home partitions are mounted with noexec flag which is often used on hardened setups or Trusted Path Execution available on hardened linux kernels.
As for now it could be fixed by disabling qml cache by setting QML_DISABLE_DISK_CACHE=1 environment variable. Is there a chance that qt will check permission rights first then quietly disable qmlcache per app instead of crashing?
Alternatively it could create cachedir somewhere in /usr/lib/qt same as python3 have it's pycache dir."
Upstream bug report: https://bugreports.qt.io/browse/QTBUG-58508
The work around of adding QML_DISABLE_DISK_CACHE=1 to /etc/enviroment got sddm working for me again. Without the work around sddm will start but show just a black screen, so I've marked this bug as grave since it completely breaks the package.
I don't see any reference that a program needs to support a hardened setup in Debian, and this is clearly something not supported upstream, as such I'm degrading the severity of this issue.
Let's see what do the qt maintainers think about setting a different cache dir or patching qt to disable the disk cache if the cache won't be loadable.
Happy hacking, --"It's a well-known fact that computing devices such as the abacus were invented thousands of years ago. But it's not well known that the first use of common computer protocol occurred in the Old Testament. This, of course, was when Moses aborted the Egyptians' process with a control-sea."
-- Tom Galloway (recs.arts.comics, February 1992) Saludos /\/\ /\ >< `/
Attachment:
signature.asc
Description: PGP signature