Debian Bug report logs - #930370
debconf: Overriding debconf db with file fails with a message "access to disallowed key Filename in restricted hash"

version graph

Package: debconf; Maintainer for debconf is Debconf Developers <[email protected]>; Source for debconf is src:debconf (PTS, buildd, popcon).

Reported by: Jiri Palecek <[email protected]>

Date: Tue, 11 Jun 2019 14:51:01 UTC

Severity: normal

Found in version debconf/1.5.71

Full log

🔗 View this message in rfc822 format

X-Loop: [email protected]
Subject: Bug#930370: debconf: Overriding debconf db with file fails with a message "access to disallowed key Filename in restricted hash"
Reply-To: Jiri Palecek <[email protected]>, [email protected]
Resent-From: Jiri Palecek <[email protected]>
Resent-To: [email protected]
Resent-CC: [email protected], Debconf Developers <[email protected]>
X-Loop: [email protected]
Resent-Date: Tue, 11 Jun 2019 14:51:01 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
X-Debian-PR-Message: report 930370
X-Debian-PR-Package: debconf
X-Debian-PR-Keywords: 
X-Debian-PR-Source: debconf
Received: via spool by [email protected] id=B.156026439226996
          (code B); Tue, 11 Jun 2019 14:51:01 +0000
Received: (at submit) by bugs.debian.org; 11 Jun 2019 14:46:32 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
	(2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-18.5 required=4.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FREEMAIL_FROM,
	HAS_PACKAGE,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE,SPF_PASS,TXREP,
	X_DEBBUGS_CC autolearn=ham autolearn_force=no
	version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 38; hammy, 150; neutral, 162; spammy,
	0. spammytokens: hammytokens:0.000-+--sk:libnet, 0.000-+--sk:libnet-,
	0.000-+--lc_messages, 0.000-+--LC_MESSAGES, 0.000-+--debconfutils
Received: from mout.web.de ([217.72.192.78])
	by buxtehude.debian.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
	(Exim 4.89)
	(envelope-from <[email protected]>)
	id 1hai2h-000716-IK
	for [email protected]; Tue, 11 Jun 2019 14:46:32 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de;
	s=dbaedf251592; t=1560264388;
	bh=z6RIYZc+S3kK29PJgXpb8fs3m6FwCo5ahv6kf4rJ4eg=;
	h=X-UI-Sender-Class:From:To:Subject:Date;
	b=IvhuD19ZsKO3iDFX7Z5nmqQrbo78bh4HgJqyMO5mLBN6M5PD8vZKSArFp375WXaar
	 4R7z3SLHXhGhtsvDDASpxWTz0ZRoz37t117E18+mqGOk+F65FpfH6OSMNHHbusPQwZ
	 feu+8asXN50kmNdJUy/3TVHnTu/y9WPu3SMw/Eto=
X-UI-Sender-Class: c548c8c5-30a9-4db5-a2e7-cb6cb037b8f9
Received: from debian ([85.71.157.74]) by smtp.web.de (mrweb102
 [213.165.67.124]) with ESMTPSA (Nemesis) id 0MGRZc-1hNSQE0KSO-00DKkt for
 <[email protected]>; Tue, 11 Jun 2019 16:41:22 +0200
From: Jiri Palecek <[email protected]>
To: Debian Bug Tracking System <[email protected]>
Date: Tue, 11 Jun 2019 16:41:19 +0200
Message-ID: <87d0jki3qo.fsf@debian>
MIME-Version: 1.0
Content-Type: text/plain
X-Provags-ID: V03:K1:JzHSt1gVx4gmtfnJsi6CTDt3O+SpVAesKXEHbfx1USjtz7nGp/s
 CJog+E7gQhbFkL6xeDUGi87ecHi80/oqWOOKtP3aHXq5d4zUa6Z6MpiBMoyAzNaK8M33l8t
 kCxP7QS4jWOQ5JQtIENmp9hFKdALrzEd5Ivea/zCL08MKU9qXON4YxwWFNBXXlpXNQ6aFX7
 mib8hrpbHpeWCDFutIeKA==
X-UI-Out-Filterresults: notjunk:1;V03:K0:a9JMUuUR1j0=:KE45A8vPBGvBqSFp91pxGy
 5RzjR27U6AXP2xyJj8dr23BjQ85qk86Hn4DTapy0ILNmi7uIjtmQ4d10q+5/KALC0D5z6O+mA
 rHQpys6+8hjtfpCSNO/cgEK/QEOjhy3+CsUxgLU7lgBtWONJkIa1zmZy36VibWjjaJzG7adgs
 OtAmM9ChsElTTMSPiSyibJCCimMce7bJgPPmERWAFSIEwdc4kcorn2XYyJx2XHs9Ryl7hUDe2
 o14Z+i+0Em3HJBT1KwO3AyFbHCxUY80CbZcnXzxxqVDXqq9lspy59VYVrmb3JYQ0iJaAPPdOK
 KLwerVmXfUoUykxRyynNV4NQlc+u4K3iKS8zKHRcMv+vA5Tbk2k6YETkWJvbcAubLj1FxLqn0
 +1/9Sot/JuUn+IAxHjeMhjInxcUD780zMa1Hctj4eyORNqHO+NVGAnA00/Y9W6kNr/tvhFWsJ
 ABNST1D9gO9xOZ4IIssuJbzgkktxJR3JVZ1T/5h/i2vLJ2yYM67SVncbXt62u1qPdd7xvf7No
 RMVyRgujpcGVwUKKc92FtjWpR+wfP31VHMTiRmdi6Qba2gx5k+zAtDW4+hV/AY3hR1BnzqV4G
 Z5Ka2L199Gwx0dUGm2Ahlqle/UKW62oCA0A5nOsuxj4sv7l/UlMPniNtmyVI9cfjudug1Vdpy
 PPI5hyPatmXKSqaFJJyKM3VBGULH/PBSzorx3VJc8hfBttEmZjiGR0Up5OGJgBK/RPkJ9Geh+
 VQ1Lr430LpZTKjpoIGacertcohi6HHr5vrpTjpwk1iLK7YDeoCQIAWmQYfz8vW1ComynI/iKl
 kPCVm5wzEJMC43WIsl+WYSn7iTryAFRYxK52LCqdSVOY8RPCJG74EK5ttxxFRaIhz4+pS3+AO
 Hec42UtEv1RjwI70vl3Dh8mGJtSQwAsJimTI3XAbfRhl3q6O9WBBtKliTv4zW8HyAJ3H1oYvC
 NvckvpqTcGqRJw/gnt6ZRZlIYR+NdlTwQmv/8fw+jx92P3ajfbj6KnQKwIJllf1+1bXwdisAt
 zA==
Delivered-To: [email protected]

Package: debconf
Version: 1.5.71
Severity: normal

Dear Maintainer,

while trying to debug some difficulties with unattended package
installation, I came accross an interesting problem. While debconf(7)
says you can use DEBCONF_DB_OVERRIDE like this:

DEBCONF_DB_FALLBACK=File{Filename:/root/config.dat Backup:no}

when trying it actually, i got an error message:

# LC_MESSAGES=C DEBCONF_DEBUG=developer DEBCONF_DB_OVERRIDE="File{Filename:config2.dat.Lwzkvd}" DEBIAN_FRONTEND=noninteractive dpkg --auto-deconfigure -i ../linux-*_"$DATE"_*.deb
... blah blah...
Attempt to access disallowed key 'Filename' in a restricted hash at /usr/share/perl5/Debconf/DbDriver.pm line 35.

It does work, though, without the "Filename:" part. What gives?

Another problem, and the reason I am actually experimentig with this, is
that it actually doesn't work unattended, because it somehow disregards
what is in the config file. ie:

debconf (developer): <-- FSET linux-image-4.19.36-bughunt+/preinst/overwriting-modules-4.19.36-bughunt+ seen false
debconf (developer): --> 0 false
debconf (developer): <-- SUBST linux-image-4.19.36-bughunt+/preinst/overwriting-modules-4.19.36-bughunt+ modules_base /lib/modules
debconf (developer): --> 0
debconf (developer): <-- SUBST linux-image-4.19.36-bughunt+/preinst/overwriting-modules-4.19.36-bughunt+ package linux-image-4.19.36-bughunt+
debconf (developer): --> 0
debconf (developer): <-- INPUT critical linux-image-4.19.36-bughunt+/preinst/overwriting-modules-4.19.36-bughunt+
debconf (developer): --> 30 question skipped
debconf (developer): <-- GO
debconf (developer): --> 0 ok
debconf (developer): <-- GET linux-image-4.19.36-bughunt+/preinst/overwriting-modules-4.19.36-bughunt+
debconf (developer): --> 0 true

I need false on the last line, but still get true (the
default). However, the config2.dat.... contains

Name: linux-image-4.19.36-bughunt+/preinst/overwriting-modules-4.19.36-bughunt+
Template: linux-image-4.19.36-bughunt+/preinst/overwriting-modules-4.19.36-bughunt+
Value: false

Maybe you could help me with that.

Regards
    Jiri Palecek

-- System Information:
Debian Release: 10.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 4.19.36-bughunt+ (SMP w/2 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=cs_CZ, LC_CTYPE=cs_CZ (charmap=ISO-8859-2), LANGUAGE=cs_CZ (charmap=ISO-8859-2)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages debconf depends on:
ii  perl-base  5.28.1-6

Versions of packages debconf recommends:
ii  apt-utils     1.8.2
ii  debconf-i18n  1.5.71

Versions of packages debconf suggests:
ii  debconf-doc                1.5.71
pn  debconf-kde-helper         <none>
ii  debconf-utils              1.5.71
ii  dialog                     1.3-20190211-1
pn  libgtk3-perl               <none>
pn  libnet-ldap-perl           <none>
ii  libterm-readline-gnu-perl  1.36-1
ii  perl                       5.28.1-6
ii  whiptail                   0.52.20-4

-- debconf information:
  debconf-apt-progress/preparing:
  debconf-apt-progress/media-change:
  debconf-apt-progress/info:
* debconf/frontend: Dialog
  debconf-apt-progress/title:
* debconf/priority: low

Send a report that this bug log contains spam.

Debian bug tracking system administrator <[email protected]>. Last modified: Fri May 16 18:18:22 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.