traceback when running apport as non-root user
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apport (Ubuntu) |
Fix Released
|
High
|
Brian Murray | ||
Xenial |
Fix Released
|
High
|
Brian Murray | ||
Bionic |
Fix Released
|
High
|
Brian Murray | ||
Focal |
Fix Released
|
High
|
Brian Murray | ||
Groovy |
Fix Released
|
High
|
Brian Murray |
Bug Description
[Impact]
The apport-test-crashes package, which is used to test the Error Tracker deployments, fails produce crash files for binary applications since "various security hardening fixes" were included in apport. The problematic change is the dropping of supplemental groups in data/apport. This results in a PermissionError as it is not the root user who is calling /usr/share/
[Test Case]
The least convulted test case involves using the generate-
1) Comment out "check_lock()" in /usr/share/
2) Put a copy of generate-
3) Run 'python3 /tmp/generate-
4) Observe the following Traceback:
Traceback (most recent call last):
File "/tmp/tmpvkt5d2
drop_
File "/tmp/tmpvkt5d2
os.
PermissionError: [Errno 1] Operation not permitted
With the version of apport from -proposed you'll receive no such Traceback.
[Regression Potential]
If there is an error in the python code we code see a new traceback for any and all crashes being generated, so ensure regular crash generation works too.
apport-test-crashes code is here:
https:/
Related branches
tags: | added: fr-978 |
Changed in apport (Ubuntu): | |
assignee: | nobody → Brian Murray (brian-murray) |
status: | New → In Progress |
importance: | Undecided → High |
Changed in apport (Ubuntu Bionic): | |
importance: | Undecided → High |
Changed in apport (Ubuntu Xenial): | |
importance: | Undecided → High |
Changed in apport (Ubuntu Focal): | |
importance: | Undecided → High |
Changed in apport (Ubuntu Bionic): | |
assignee: | nobody → Brian Murray (brian-murray) |
Changed in apport (Ubuntu Focal): | |
assignee: | nobody → Brian Murray (brian-murray) |
Changed in apport (Ubuntu Groovy): | |
assignee: | nobody → Brian Murray (brian-murray) |
Changed in apport (Ubuntu Xenial): | |
assignee: | nobody → Brian Murray (brian-murray) |
Changed in apport (Ubuntu Groovy): | |
importance: | Undecided → High |
description: | updated |
Changed in apport (Ubuntu Xenial): | |
status: | New → In Progress |
Changed in apport (Ubuntu Bionic): | |
status: | New → In Progress |
Changed in apport (Ubuntu Focal): | |
status: | New → In Progress |
Changed in apport (Ubuntu Groovy): | |
status: | New → Incomplete |
apport (2.20.11-0ubuntu55) hirsute; urgency=medium
* data/apport: only drop supplemental groups if the user is root.
-- Brian Murray <email address hidden> Wed, 02 Dec 2020 14:40:29 -0800