github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #4733] GitLab CI broken: Lintian failure because of binary in /etc (profstats) #2769

New issue
Closed
opened 2026-05-05 09:25:57 -06:00 by gitea-mirror · 4 comments
gitea-mirror commented 2026-05-05 09:25:57 -06:00
Owner
Copy link

Originally created by @kmk3 on GitHub (Dec 1, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4733

Likely caused by commit 8f93df99f ("install profstats in /etc/firejail
directory - undocumented, used only for development", 2021-11-30).

Failed pipelines for that commit:

  • build_debian_package

https://gitlab.com/Firejail/firejail_ci/-/jobs/1833634608

*****************************************
install size 6368	firejail-0.9.67/debian
*****************************************
dpkg-deb: building package 'firejail' in 'debian.deb'.
warning: the authors of lintian do not recommend running it with root privileges!
E: firejail: binary-in-etc etc/firejail/profstats
W: firejail: executable-is-not-world-readable usr/lib/firejail/fcopy 0711
W: firejail: executable-is-not-world-readable usr/lib/firejail/fldd 0711
W: firejail: executable-is-not-world-readable usr/lib/firejail/fnet 0711
W: firejail: executable-is-not-world-readable usr/lib/firejail/fnetfilter 0711
W: firejail: executable-is-not-world-readable usr/lib/firejail/fsec-optimize 0711
W: firejail: executable-is-not-world-readable usr/lib/firejail/fsec-print 0711
W: firejail: executable-is-not-world-readable usr/lib/firejail/fseccomp 0711
W: firejail: executable-is-not-world-readable usr/lib/firejail/fshaper.sh 0711
N: 1 tag overridden (1 warning)
Makefile:224: recipe for target 'deb' failed
make: *** [deb] Error 1
Cleaning up project directory and file based variables 00:01
ERROR: Job failed: exit code 2
  • debian_ci

https://gitlab.com/Firejail/firejail_ci/-/jobs/1833634618

make[1]: Entering directory '/builds/Firejail/firejail_ci'
dh_missing -pfirejail --fail-missing
dh_missing: warning: etc/firejail/profstats exists in debian/tmp but is not installed to anywhere 
dh_missing: error: missing files, aborting
	The following debhelper tools have reported what they installed (with files per package)
	 * dh_install: firejail (44), firejail-profiles (1174)
	 * dh_installdocs: firejail (5), firejail-profiles (0)
	 * dh_installman: firejail (0), firejail-profiles (0)
	If the missing files are installed by another tool, please file a bug against it.
	When filing the report, if the tool is not part of debhelper itself, please reference the
	"Logging helpers and dh_missing" section from the "PROGRAMMING" guide for debhelper (10.6.3+).
	  (in the debhelper package: /usr/share/doc/debhelper/PROGRAMMING.gz)
	Be sure to test with dpkg-buildpackage -A/-B as the results may vary when only a subset is built
	If the omission is intentional or no other helper can take care of this consider adding the
	paths to debian/not-installed.
make[1]: *** [debian/rules:34: override_dh_missing] Error 25
make[1]: Leaving directory '/builds/Firejail/firejail_ci'
make: *** [debian/rules:8: binary] Error 2
dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2
debuild: fatal error at line 1182:
dpkg-buildpackage -us -uc -ui -i -I failed
gbp:error: 'debuild -i -I -uc -us' failed: it exited with 29
Cleaning up project directory and file based variables 00:00
ERROR: Job failed: exit code 1

Cc: @netblue30 @reinerh

Originally created by @kmk3 on GitHub (Dec 1, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4733 Likely caused by commit 8f93df99f ("install profstats in /etc/firejail directory - undocumented, used only for development", 2021-11-30). Failed pipelines for that commit: * `build_debian_package` <https://gitlab.com/Firejail/firejail_ci/-/jobs/1833634608> ```plaintext ***************************************** install size 6368 firejail-0.9.67/debian ***************************************** dpkg-deb: building package 'firejail' in 'debian.deb'. warning: the authors of lintian do not recommend running it with root privileges! E: firejail: binary-in-etc etc/firejail/profstats W: firejail: executable-is-not-world-readable usr/lib/firejail/fcopy 0711 W: firejail: executable-is-not-world-readable usr/lib/firejail/fldd 0711 W: firejail: executable-is-not-world-readable usr/lib/firejail/fnet 0711 W: firejail: executable-is-not-world-readable usr/lib/firejail/fnetfilter 0711 W: firejail: executable-is-not-world-readable usr/lib/firejail/fsec-optimize 0711 W: firejail: executable-is-not-world-readable usr/lib/firejail/fsec-print 0711 W: firejail: executable-is-not-world-readable usr/lib/firejail/fseccomp 0711 W: firejail: executable-is-not-world-readable usr/lib/firejail/fshaper.sh 0711 N: 1 tag overridden (1 warning) Makefile:224: recipe for target 'deb' failed make: *** [deb] Error 1 Cleaning up project directory and file based variables 00:01 ERROR: Job failed: exit code 2 ``` * `debian_ci` <https://gitlab.com/Firejail/firejail_ci/-/jobs/1833634618> ```plaintext make[1]: Entering directory '/builds/Firejail/firejail_ci' dh_missing -pfirejail --fail-missing dh_missing: warning: etc/firejail/profstats exists in debian/tmp but is not installed to anywhere dh_missing: error: missing files, aborting The following debhelper tools have reported what they installed (with files per package) * dh_install: firejail (44), firejail-profiles (1174) * dh_installdocs: firejail (5), firejail-profiles (0) * dh_installman: firejail (0), firejail-profiles (0) If the missing files are installed by another tool, please file a bug against it. When filing the report, if the tool is not part of debhelper itself, please reference the "Logging helpers and dh_missing" section from the "PROGRAMMING" guide for debhelper (10.6.3+). (in the debhelper package: /usr/share/doc/debhelper/PROGRAMMING.gz) Be sure to test with dpkg-buildpackage -A/-B as the results may vary when only a subset is built If the omission is intentional or no other helper can take care of this consider adding the paths to debian/not-installed. make[1]: *** [debian/rules:34: override_dh_missing] Error 25 make[1]: Leaving directory '/builds/Firejail/firejail_ci' make: *** [debian/rules:8: binary] Error 2 dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2 debuild: fatal error at line 1182: dpkg-buildpackage -us -uc -ui -i -I failed gbp:error: 'debuild -i -I -uc -us' failed: it exited with 29 Cleaning up project directory and file based variables 00:00 ERROR: Job failed: exit code 1 ``` Cc: @netblue30 @reinerh
gitea-mirror 2026-05-05 09:25:57 -06:00
  • closed this issue
  • added the
    bug
         label
gitea-mirror commented 2026-05-05 09:26:00 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Dec 1, 2021):

rpmlint: firejail.x86_64: E: binary-in-etc /etc/firejail/profstats

Probably every distro will need to patch this out because it violates packaging-guidelines.

<!-- gh-comment-id:984099202 --> @rusty-snake commented on GitHub (Dec 1, 2021): rpmlint: `firejail.x86_64: E: binary-in-etc /etc/firejail/profstats` Probably every distro will need to patch this out because it violates packaging-guidelines.
gitea-mirror commented 2026-05-05 09:26:01 -06:00
Author
Owner
Copy link

@reinerh commented on GitHub (Dec 1, 2021):

Yes, this should really not get installed there. LIB(EXEC)DIR is probably a better place. Maybe it can also be "hidden" behind the configure flag that enables installation of contrib scripts?

<!-- gh-comment-id:984100027 --> @reinerh commented on GitHub (Dec 1, 2021): Yes, this should really not get installed there. LIB(EXEC)DIR is probably a better place. Maybe it can also be "hidden" behind the configure flag that enables installation of contrib scripts?
gitea-mirror commented 2026-05-05 09:26:03 -06:00
Author
Owner
Copy link

@netblue30 commented on GitHub (Dec 8, 2021):

I'll put a fix in, thanks.

<!-- gh-comment-id:989022903 --> @netblue30 commented on GitHub (Dec 8, 2021): I'll put a fix in, thanks.
gitea-mirror commented 2026-05-05 09:26:04 -06:00
Author
Owner
Copy link

@kmk3 commented on GitHub (Dec 10, 2021):

Fixed by commit 30e754610 ("profstats fix (#4733)", 2021-12-10).

The GitLab pipeline runs successfully now:

<!-- gh-comment-id:991152744 --> @kmk3 commented on GitHub (Dec 10, 2021): Fixed by commit 30e754610 ("profstats fix (#4733)", 2021-12-10). The GitLab pipeline runs successfully now: * <https://gitlab.com/Firejail/firejail_ci/-/pipelines/427033924>
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2769
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?