Bug#991378: df: /run/user/1000/doc: Operation not permitted

Vincent Lefevre

unread,

Jul 21, 2021, 8:20:03 PM7/21/21

to

Package: coreutils
Version: 8.32-4+b1
Severity: normal
Tags: upstream, fixed-upstream

I get the following error:

zira:~> df /run/user/1000/doc
df: /run/user/1000/doc: Operation not permitted

A search on the web leads to

https://bugzilla.redhat.com/show_bug.cgi?id=1913358

This is apparently fixed by this upstream commit:

https://git.savannah.gnu.org/gitweb/?p=gnulib.git;a=commitdiff;h=9a38d499ca16f2f4304992eb1ab0894cd0b478e1

-- System Information:
Debian Release: 11.0
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'testing-security'), (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=POSIX, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages coreutils depends on:
ii libacl1 2.2.53-10
ii libattr1 1:2.4.48-6
ii libc6 2.31-13
ii libgmp10 2:6.2.1+dfsg-1
ii libselinux1 3.1-3

coreutils recommends no packages.

coreutils suggests no packages.

-- no debconf information

--
Vincent Lefèvre <vin...@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Vincent Lefevre

unread,

Jul 21, 2021, 9:40:05 PM7/21/21

to

On 2021-07-22 02:09:01 +0200, Vincent Lefevre wrote:
> I get the following error:
>
> zira:~> df /run/user/1000/doc
> df: /run/user/1000/doc: Operation not permitted

Note: the error is also obtained with a simple "df" with no arguments
(one also gets the additional usual output).

Karl Schmidt

unread,

Jan 7, 2022, 9:00:04 PM1/7/22

to

It breaks the df command and rf command - both return unhelpful error messages - breaks scrips that use df..

Putting a mount point in /root/.cache was never a good idea - not where they belong (breaks the FHS standard)

Adds confusion to users - something in a cache should be delete-able - this creates what looks like an empty directory
that one can not delete.

Not able to install fuse3 from testing as it wants to remove libc-bin..

Stable needs an update.

I think this should have severity: critical as it breaks unrelated software? - or at the very least 'serious' as if
violates a few of the must and required directives?

--
--------------------------------------------------------------------------------
Karl Schmidt EMail ka...@lrak.net
3209 West 9th Street Ph (785) 841-3089
Lawrence, KS 66049

Google is the camel's nose.
-kps
--------------------------------------------------------------------------------

Michael Stone

unread,

Jan 7, 2022, 10:50:03 PM1/7/22

to

agreed, someone should fix xdg-desktop-portal to not cause errors

Karl Schmidt

unread,

Jan 8, 2022, 12:40:02 AM1/8/22

to

On 1/7/22 9:31 PM, Michael Stone wrote:
> agreed, someone should fix xdg-desktop-portal to not cause errors

Ok - now I'm really confused..

My digging had me looking at fuse3?

I don't see such open bug in xdg-desktop-portal ?

<time passes >
I saw this crop up when I did a sshfs mount..

df hinted at the strange /root/.cache directoy -

I thought it was due to the /root/.cache/doc/by-app directory - which has nothing in it - can't be deleted.

I figured it was in use - but lsof can't see it.

lsof: WARNING: can't stat() fuse.portal file system /run/user/1001/doc
Output information may be incomplete.

$ ll /run/user/1001/

returns

d????????? ? ? ? ? ? doc/

Finally the error lsof gave me had me look for a bad mount - but unmounting the sshfs mount does not make it go away.

Ahh . It was a second mount at /run/user/1001/doc

I was able to get back to normal with:
$ umount /run/user/1001/doc

- so once gone - I tried to recreate - turns out it is not the sshfs mount - it is

$ pkexec env DISPLAY=$DISPLAY XAUTHORITY=$XAUTHORITY meld

That creates the mess -- pkexec is part of policykit-1

Don't see any such bugs.. hope these breadcrumbs help someone.

Alberto Garcia

unread,

Mar 2, 2022, 12:30:04 PM3/2/22

to

On Fri, Jan 07, 2022 at 10:31:26PM -0500, Michael Stone wrote:
> agreed, someone should fix xdg-desktop-portal to not cause errors

Regardless of how this can be solved in xdg-desktop-portal (and as far
as I'm aware there is no fix at the moment) this can also be solved by
a patch in gnulib/coreutils.

Coreutils 9.0 is already out and contains the solution for this
problem, so once the package is updated this will be solved.

This also happens in bullseye, in that case the one-liner mentioned by
Vincent Lefevre can be cherry-picked.

Berto