Arch Linux

nokangaroo

Member

Registered: 2013-09-08

Posts: 25

Suspect string in the polkitd binary (/ru/usr/share/polkiolkit-1)

/org/freedesktop/PolicyKit1/Auth/etc/polkit-1/ru/usr/share/polkiolkit-1/rules.d

I found this string in the /usr/lib/polkit-1/polkitd binary (both the packaged version, including the manually downloaded package from "https://archlinux.org/packages/extra/x86_64/polkit/", and my own build). It is not in the source, only in the compiled binary. A web search for polkiolkit comes up empty.

Edit: That string is not in polkit-122-1, which I downgraded from my cache and marked no-upgrade until I know what it is.

Last edited by nokangaroo (2023-11-17 17:15:13)

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 21,754

Re: Suspect string in the polkitd binary (/ru/usr/share/polkiolkit-1)

A russian translation got added with 123: https://gitlab.freedesktop.org/polkit/p … quests/175

the fact somethings mangled might just be encoding from reading the binary with strings or we.

nokangaroo

Member

Registered: 2013-09-08

Posts: 25

Re: Suspect string in the polkitd binary (/ru/usr/share/polkiolkit-1)

It is a bug (or backdoor? Remember Ken Thompson) in gcc. When I build the package with clang the string is no longer present (polkit-122-1 built with current gcc had the string in it). And I grepped the whole build directory, including the git repo. The string is only in the polkitd binary built with the current gcc. And there is no string '/ru/' in the binary.
Edit: The polkit-122-1 package was built with gcc-12.2.0. I downloaded gcc-12.2.0 from the archive, but the binary still had the string in it (and 2 GCC strings, 12.2.0 AND 13.2.1. I suppose I'd have to downgrade ldd (=glibc) as well, which is impossible, so I'm out of options.
Edit: I am using a git version of glibc, since the VLC website warned against glibc-2.38. Since I can't downgrade it, I upgraded. I suppose I could go back to the glibc package, at the cost of VLC performance.

Last edited by nokangaroo (2023-11-17 20:30:56)

seth

Member

Registered: 2012-09-03

Posts: 51,532

Re: Suspect string in the polkitd binary (/ru/usr/share/polkiolkit-1)

/org/freedesktop/PolicyKit1/Auth/etc/polkit-1/ru/usr/share/polkiolkit-1/rules.d

somethings mangled might just be encoding from reading the binary

The thing in /etc/polkit-1/ is "rules.d" …

https://man.archlinux.org/man/core/binu … ESCRIPTION

GNU strings prints the printable character sequences that are at least 4 characters long (or the number given with the options below) and are followed by an unprintable character.

strings doesn't tell you what actual strings exist in a program, it filters ascii out of garbage.
You could try to build polit w/ different optimization/debugger settings.

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 21,754

Re: Suspect string in the polkitd binary (/ru/usr/share/polkiolkit-1)

The glibc ffmpeg regression should be fixed in the current repo package, we aren't on straight glibc 2.38 since a while