Bug#994030: man-db: error while loading shared libraries: libmandb-2.9.4.so
BERTRAND Joël
Version: 2.9.4-2
Severity: important
Dear Maintainer,
Since a few days (if I remember since I have upgraded my workstation
to last testing release), man aborts with folloging message:
Root hilbert:[~] > man man
man: error while loading shared libraries: libmandb-2.9.4.so: cannot open shared object file: Permission denied
This workstation is a diskless workstation. Rootfs is exported by a NetBSD
server.
strace shows that man binary tries to open libmandb-2.9.4.so in
following directories:
- /usr/lib/man-db/tls/haswell/x86_64/
- /usr/lib/man-db/tls/haswell/
- /usr/lib/man-db/tls/x86_64/
- /usr/lib/man-db/tls/
- /usr/lib/man-db/haswell/x86_64/
- /usr/lib/man-db/haswell/
- /usr/lib/man-db/x86_64/
- /usr/lib/man-db/
- /lib/x86_64-linux-gnu/tls/haswell/x86_64/
- /lib/x86_64-linux-gnu/tls/haswell/
- /lib/x86_64-linux-gnu/tls/x86_64/
- /lib/x86_64-linux-gnu/tls/
- /lib/x86_64-linux-gnu/haswell/x86_64/
- /lib/x86_64-linux-gnu/haswell/
- /lib/x86_64-linux-gnu/x86_64/
- /lib/x86_64-linux-gnu/
- /usr/lib/x86_64-linux-gnu/tls/haswell/x86_64/
- /usr/lib/x86_64-linux-gnu/tls/haswell/
- /usr/lib/x86_64-linux-gnu/tls/x86_64/
- /usr/lib/x86_64-linux-gnu/tls/
- /usr/lib/x86_64-linux-gnu/haswell/x86_64/
- /usr/lib/x86_64-linux-gnu/haswell/
- /usr/lib/x86_64-linux-gnu/x86_64/
- /usr/lib/x86_64-linux-gnu/
- /lib/tls/haswell/x86_64/
- /lib/tls/haswell/
- /lib/tls/x86_64/
- /lib/tls/
- /lib/haswell/x86_64/
- /lib/haswell/
- /lib/x86_64/
- /lib/
- /usr/lib/tls/haswell/x86_64/
- /usr/lib/tls/haswell/
- /usr/lib/tls/x86_64/
- /usr/lib/tls/
- /usr/lib/haswell/x86_64/
- /usr/lib/haswell/
- /usr/lib/x86_64/
- /usr/lib/
libmandb-2.9.4.so is in my case in /usr/lib/man-db/ and libmandb-2.9.4.so and
seems to be a dynamic library:
Root hilbert:[/usr/lib] > ls -al /usr/lib/man-db/libmandb-2.9.4.so
-rw-r--r-- 1 root root 30712 19 févr. 2021 /usr/lib/man-db/libmandb-2.9.4.so
Root hilbert:[/usr/lib] > file /usr/lib/man-db/libmandb-2.9.4.so
/usr/lib/man-db/libmandb-2.9.4.so: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c20b1c94193b241e4e17834335605b9d68db1632, stripped
I have tried to force library preload with:
Root hilbert:[~] > LD_PRELOAD=/usr/lib/man-db/libmandb-2.9.4.so man man
ERROR: ld.so: object '/usr/lib/man-db/libmandb-2.9.4.so' from LD_PRELOAD cannot be preloaded (cannot open shared object file): ignored.
man: error while loading shared libraries: libmandb-2.9.4.so: cannot open shared object file: Permission denied
Help will be welcome.
Best regards,
JB
-- System Information:
Debian Release: bookworm/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.10.0-8-amd64 (SMP w/20 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages man-db depends on:
ii bsdextrautils 2.37.2-1
ii bsdmainutils 12.1.7+nmu3
ii debconf [debconf-2.0] 1.5.77
ii dpkg 1.20.9
ii groff-base 1.22.4-6
ii libc6 2.31-17
ii libgdbm6 1.20-1
ii libpipeline1 1.5.3-1
ii libseccomp2 2.5.1-1
ii zlib1g 1:1.2.11.dfsg-2
man-db recommends no packages.
Versions of packages man-db suggests:
ii apparmor 3.0.3-2
ii chromium [www-browser] 90.0.4430.212-1
ii firefox-mozilla-build [www-browser] 92.0-0ubuntu1
pn groff <none>
ii konqueror [www-browser] 4:21.08.0-1
ii less 551-2
ii seamonkey-mozilla-build [www-browser] 2.53.9-0ubuntu1
-- debconf information:
man-db/auto-update: true
man-db/install-setuid: false
Colin Watson
> Since a few days (if I remember since I have upgraded my workstation
> to last testing release), man aborts with folloging message:
>
> Root hilbert:[~] > man man
> man: error while loading shared libraries: libmandb-2.9.4.so: cannot open shared object file: Permission denied
>
> This workstation is a diskless workstation. Rootfs is exported by a NetBSD
> server.
access, which isn't normally allowed. Adding a "network," line to the
end of /etc/apparmor.d/local/usr.bin.man and then running "sudo
apparmor_parser -r /etc/apparmor.d/usr.bin.man" may help, though I
haven't tested that at all. Failing that, you can use "sudo aa-complain
/etc/apparmor.d/usr.bin.man" to set that profile to complain mode rather
than enforce mode.
See https://wiki.debian.org/AppArmor for more details about AppArmor.
--
Colin Watson (he/him) [cjwa...@debian.org]