Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

Regression in latest SLR betas and steamrt3c Steam Client if using pam_tmpdir or pam_mktemp

Abierto
  • ¿Algo no está bien?
#855 4 comentarios 0 reacciones 0 asignados Ver en GitHub

Ya se ha fusionado un pull request relacionado.

  • #807 de @smcv — fusionado

Evaluación

Dificultad
4/5
Tiempo estimado
3-5 días
Aptitud para principiantes
40/100
Tipo de issue
Error
Claridad
Bien especificado
Estado de actividad
Activo
Stack tecnológico
linux, shell
Área
cli, devops, operating-systems

Línea de trabajo

The issue is about bubblewrap (bwrap) 0.12.0 failing when PAM modules like pam_tmpdir set TMPDIR to a directory with unusual permissions. Start by examining the steam-runtime's srt-bwrap integration and the linked bubblewrap issue #806. Reproduce the failure with the given shell commands, then look at bwrap's source code around directory creation and permission handling. The fix likely involves modifying bwrap's handling of bind mounts for directories with restricted parent traversal permissions.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

After updating the Steam Runtime's internal copy of bubblewrap (srt-bwrap) to 0.12.0, launching its containers no longer works on a system with Debian's pam_tmpdir, or with OpenWall's pam_mktemp as packaged by Gentoo. Despite being unrelated codebases, these two are basically equivalent: they're implementations of the same idea.

These PAM modules create a restricted parent directory that ordinary users can traverse through, but not list (this is unusual!), and then a per-user private temp directory inside that, and set TMPDIR (among other environment variables) to that per-user directory. The same effect can be reproduced on a test system with something like this:

sudo mkdir -m711 /tmp/private
sudo install -d -o$(id -nu) -g$(id -ng) -m1770 /tmp/private/$(id -nu)
# the PAM module would do the equivalent of: export TMPDIR=/tmp/private/$(id -nu)

bwrap --ro-bind / / --bind "/tmp/private/$(id -nu)" "/tmp/private/$(id -nu) -- true

With older bwrap builds, this worked. With a newer bwrap build, it fails with bwrap: Can't mkdir parents for /tmp/private/user: Permission denied. This is tracked as https://github.com/containers/bubblewrap/issues/806 in bwrap.

Affected versions

Steam Linux Runtime betas dated x.0.20260914.y are affected.

The experimental steamrt3c Steam Client is not currently affected, but its next beta probably will be.

Workarounds
  • Don't use pam_tmpdir or pam_mktemp
  • Or set all of the environment variables TMP, TMPDIR, TEMP and TEMPDIR to an existing directory whose parent directories are all readable (for example $HOME/tmp, /tmp or /var/tmp) before starting Steam
Lenguaje dominante
Shell
Estrellas
1.5k
Forks
97
Sin PR fusionados en 30 d

Preparar el entorno

Este proyecto no incluye contenedor de desarrollo, Dockerfile ni guía de contribución, así que la configuración corre por tu cuenta: empieza por su README y consulta nuestra guía para la primera contribución para los pasos generales.

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de ValveSoftware/steam-runtime

Todos los issues de ValveSoftware/steam-runtime

Issues similares

Más issues de Shell/Bash

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.