whoopsie-id is world readable

Bug #1386752 reported by Brian Murray on 2014-10-28
14
This bug affects 1 person
Affects Status Importance Assigned to Milestone
whoopsie (Ubuntu)
High
Brian Murray
Trusty
High
Unassigned
Utopic
High
Brian Murray
whoopsie (Ubuntu RTM)
High
Unassigned

Bug Description

Test Case
---------
Confirm that /var/lib/whoopsie/whoopsie-id is not group and world readable.

$ ls -lh /var/lib/whoopsie/whoopsie-id
-rw-r--r-- 1 root root 128 Oct 27 19:00 /var/lib/whoopsie/whoopsie-id

It should be 600, not 644.

Changed in whoopsie (Ubuntu):
status: New → In Progress
importance: Undecided → High
assignee: nobody → Brian Murray (brian-murray)
Changed in whoopsie (Ubuntu RTM):
status: New → Triaged
importance: Undecided → High
Changed in whoopsie (Ubuntu Trusty):
status: New → Triaged
importance: Undecided → High
description: updated
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package whoopsie - 0.2.40

---------------
whoopsie (0.2.40) vivid; urgency=medium

  [ Evan Dandrea ]
  * Wait for network-manager to start when it's installed.

  [ Brian Murray ]
  * tests/monitor: Stop using mktemp, and clean up after ourselves in the
    callback_not_triggered_without_upload_file test.
  * Change ownership of whoopsie-id so that it is not world readable.
    (LP: #1386752)
 -- Brian Murray <email address hidden> Wed, 29 Oct 2014 10:28:24 -0700

Changed in whoopsie (Ubuntu):
status: In Progress → Fix Released
Changed in whoopsie (Ubuntu Trusty):
assignee: nobody → Brian Murray (brian-murray)
status: Triaged → In Progress
Brian Murray (brian-murray) wrote :

I'd mistakenly opened a Trusty task when I wanted one for Utopic. Fixed now.

Changed in whoopsie (Ubuntu Utopic):
status: New → In Progress
importance: Undecided → High
assignee: nobody → Brian Murray (brian-murray)
Changed in whoopsie (Ubuntu Trusty):
status: In Progress → Invalid
assignee: Brian Murray (brian-murray) → nobody
tags: added: utopic vivid

Hello Brian, or anyone else affected,

Accepted whoopsie into utopic-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/whoopsie/0.2.39ubuntu0.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in whoopsie (Ubuntu Utopic):
status: In Progress → Fix Committed
tags: added: verification-needed
Brian Murray (brian-murray) wrote :

Sorry, your system lacks support for the snapshot feature
(Reading database ... 682582 files and directories currently installed.)
Preparing to unpack .../whoopsie_0.2.39ubuntu0.1_amd64.deb ...
whoopsie stop/waiting
Unpacking whoopsie (0.2.39ubuntu0.1) over (0.2.39) ...
Preparing to unpack .../libwhoopsie0_0.2.39ubuntu0.1_amd64.deb ...
Unpacking libwhoopsie0 (0.2.39ubuntu0.1) over (0.2.39) ...
Processing triggers for ureadahead (0.100.0-16) ...
[ 3:25PM ] [ bdmurray@impulse:~/source-trees/apport/vivid ]
 $ ls -lh /var/lib/whoopsie/whoopsie-id
-rw------- 1 root root 128 Oct 31 15:25 /var/lib/whoopsie/whoopsie-id

tags: added: verification-done
removed: verification-needed

The verification of the Stable Release Update for whoopsie has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Launchpad Janitor (janitor) wrote :

This bug was fixed in the package whoopsie - 0.2.39ubuntu0.1

---------------
whoopsie (0.2.39ubuntu0.1) utopic-proposed; urgency=medium

  * Change ownership of whoopsie-id so that it is not world readable.
    (LP: #1386752)
 -- Brian Murray <email address hidden> Wed, 29 Oct 2014 12:26:29 -0700

Changed in whoopsie (Ubuntu Utopic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Duplicates of this bug

Other bug subscribers