Bug#1012395: start-stop-daemon: matching only on non-root pidfile /run/netdata.pid is insecure

[Gian Piero Carrubba]

Package: netdata-core
Version: 1.34.1-1+b1
Severity: normal
Tags: patch

Init: OpenRC (via /run/openrc), PID 1: init

> ls -l /run/netdata.pid
ls: cannot access '/run/netdata.pid': No such file or directory
> sudo service netdata start
Starting the netdata daemon...2022-06-06 12:09:40: netdata INFO : MAIN
: CONFIG: cannot load cloud config
'/var/lib/netdata/cloud.d/cloud.conf'. Running with internal defaults.
done.
> sudo service netdata status
netdata is running.
> sudo service netdata stop
Stopping the netdata daemon...start-stop-daemon: matching only on
non-root pidfile /run/netdata.pid is insecure
failed (/usr/sbin/netdata died: process 12267 not running; or permission
denied).
> ls -l /run/netdata.pid
-rw-r--r-- 1 netdata netdata 6 Jun 6 12:09 /run/netdata.pid
> pgrep -l netdata
12267 netdata
12269 netdata

Thanks,
Gian Piero.

-- System Information:
Debian Release: bookworm/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.17.0-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: OpenRC (via /run/openrc), PID 1: init
LSM: AppArmor: enabled

Versions of packages netdata-core depends on:
ii init-system-helpers 1.63
ii libc6 2.33-7
ii libcap2 1:2.44-1
ii libcap2-bin 1:2.44-1
ii libjson-c5 0.16-1
ii libjudydebian1 1.0.5-5+b2
ii liblz4-1 1.9.3-2
ii libmnl0 1.0.4-3
ii libnetfilter-acct1 1.0.3-3
ii libssl3 3.0.3-6
ii libuuid1 2.38-4
ii libuv1 1.44.1-2
ii lsb-base 11.2
ii zlib1g 1:1.2.11.dfsg-4

Versions of packages netdata-core recommends:
ii curl 7.83.1-1+b1

Versions of packages netdata-core suggests:
ii apcupsd 3.14.14-3.1
ii iproute2 5.17.0-2
ii iw 5.16-1
ii lm-sensors 1:3.6.0-7
pn nc <none>

-- Configuration Files:
/etc/netdata/netdata.conf changed [not included]

-- no debconf information