Ubuntu
aptdaemon package

  1. Bug #1449587
  2. Comment #4

Comment 4 for bug 1449587

Revision history for this message
Michael Vogt (mvo) wrote :

This might be sufficient, its a bit ugly right now, should become a context manager:
with os.seteuid(trans.uid):
    ...
But should fix the issue that install-file can be used as a information leak.