Hooks not running

[yannickperrenet]

Describe the bug
Redshift does not trigger any hooks.

According to #335 hooks are now also running on startup, but when I run redshift my hooks do not run (from what I can tell).

• I have checked the FAQ and my issue is not mention there.

To Reproduce
Create an executable file ~/.config/redshift/hooks/test.sh with content:

#!/bin/sh
case $1 in
    period-changed)
        exec touch /home/ubuntu/myredshifthook
esac

Next I start redshift using redshift and I don't see the file being created.

Expected behavior
The hook should run and create the given file.

Software versions (please complete the following information):

• OS: Linux
• Redshift version: 1.12
• Distribution: Ubuntu 21.04
• Redshift installed from: "using apt-get"

[yannickperrenet]

My guess is that it is related to #672 but I don't how how to check that.

[yannickperrenet]

It was indeed related to #672.

I inspected the files /etc/apparmor.d/usr.bin.redshift and /etc/apparmor.d/local/usr.bin.redshift and found that $XDG_CONFIG_HOME/redshift/* was not allowed.

To solve my issue I first created the correct setup for the local file and reloaded the apparmor service (i.e. sudo systemctl reload apparmor.service) but wasn't quite happy with the result and ended up removing both aforementioned files from /etc/apparmor.d.

Now everything runs as expected.

---

Writing this down in case anyone else runs into the issue. First I checked whether apparmor was indeed preventing redshift from working how I envisioned. So I searched for apparmor="DENIED" lines that also contain redshift in the output of sudo dmesg | less after running redshift -c /path/to/config. And indeed apparmor was the cause.

[Konfekt]

Did adding

owner @{HOME}/.config/redshift/** r,

to /etc/apparmor.d/local/usr.bin.redshift and sudo systemctl reload apparmor.service not fix the execution of hooks?

[yannickperrenet]

@Konfekt That is indeed what I did. Should've written something similar to your explanation instead of my cumbersome explanation 👍

[NeatNit]

For anyone else seeing this in the future, the above addition was still not enough - at least, not to /etc/apparmor.d/usr.bin.redshift. I had to add owner @{HOME}/.config/redshift/hooks/** ux, as well. I've never heard of AppArmor before now so I hope I did it right.

The full contents of my /etc/apparmor.d/usr.bin.redshift are now:

# ------------------------------------------------------------------
#
#    Copyright (C) 2015 Cameron Norman <camerontnorman@gmail.com>
#
#    This program is free software: you can redistribute it and/or modify
#    it under the terms of the GNU General Public License as published by
#    the Free Software Foundation, either version 3 of the License, or
#    (at your option) any later version.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
# ------------------------------------------------------------------

#include <tunables/global>
/usr/bin/redshift {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/dbus-strict>
  #include <abstractions/wayland>
  #include <abstractions/X>

  dbus send
       bus=system
       path=/org/freedesktop/GeoClue2/Client/[0-9]*,

  dbus receive
       bus=system
       path=/org/freedesktop/GeoClue2/Manager,

  # Allow but log any other dbus activity
  audit dbus bus=system,

  owner @{HOME}/.config/redshift.conf r,
  owner @{HOME}/.config/redshift/** r,
  owner @{HOME}/.config/redshift/hooks/** ux,
  owner /run/user/*/redshift-shared-* rw,

  # Site-specific additions and overrides. See local/README for details.
  #include <local/usr.bin.redshift>
}

[Konfekt]

Thank you @NeatNit. Wouldn't it be for the better to promote this to a pull request?

[NeatNit]

Thank you @NeatNit. Wouldn't it be for the better to promote this to a pull request?

From my POV, you are more than welcome to do that (though maybe you shouldn't, see below). As I said, I never heard of AppArmor before today so I don't feel comfortable making a PR like that without fully understanding the repercussions. Specifically, there are several different 'execute' permissions available in AppArmor and I didn't fully understand the pros and cons of each.

However, see PR #864 and @CameronNemo's comment:

I will remind everyone at Debian that Gammastep is a fork of Redshift that is maintained and accepting pull requests. It still supports all of the FOSS backends that Redshift supports (only Windows and macOS support were removed, not X or DRM; Wayland support was added).

You may also find this fix, that has been included in gammastep for over 2 years, helpful:

https://gitlab.com/chinstrap/gammastep/-/commit/9db19f5ccfad20ab7b501daedcfd5ef137860dd2

Gammastep in Debian could use an update, from 2.0.2 to 2.0.9. There have been some relevant fixes since the last version was uploaded to Sid. https://gitlab.com/chinstrap/gammastep/-/blob/master/NEWS.md

I might migrate to it myself. Only reason I'm using Redshift is that (I think) it came pre-installed with Linux Mint.

[CameronNemo]

Yes unfortunately no Debian Developer has stepped up to update gammastep since the initial few uploads. So looks like another stable Debian will be missing some important fixes that I released upstream.

[NeatNit]

Yes unfortunately no Debian Developer has stepped up to update gammastep since the initial few uploads. So looks like another stable Debian will be missing some important fixes that I released upstream.

Is there a procedure for getting them to update it? Or help them out with it somehow? I don't think making comments on PRs will get any Debian maintainer's attention.

[CameronNemo]

@NeatNit I dunno I don't use or contribute to Debian. Just thought I would mention it since you are on Mint and thus will be getting the 2.0.2 version that is a couple years out of date.

edit: this appears to be relevant https://www.debian.org/doc/manuals/developers-reference/pkgs.html#adopting-a-package

[Konfekt]

@NeatNit : Thank you, I wasn't aware of #864 that has been opened in the meanwhile.
@CameronNemo : Thank you for solving this nagging bug in your fork already two years ago. May I ask how Gammastep differs from Redshift on X beyond this ?