Overwrites ~/.aptitude/config with root permissions if run under sudo
Bug #498545 reported by
Kim Alvefur
This bug report is a duplicate of:
Bug #1556302: Ubuntu patch to add HOME to env_keep makes custom commands vulnerable by default.
Edit
Remove
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
aptitude (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: aptitude
Bug 10537 seems to be back.
When I run `sudo aptitude something`, it unlinks and overwrites my ~/.aptitude/config and since it's running as root, it get's owned by root:root, and chmod 640. If then run as me, it can't read the file and uses default settings, and then replaces the config with a empty file.
ProblemType: Bug
Architecture: i386
Date: Sat Dec 19 17:22:33 2009
DistroRelease: Ubuntu 9.10
NonfreeKernelMo
Package: aptitude 0.4.11.11-1ubuntu6
ProcEnviron:
LC_TIME=
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/bash
ProcVersionSign
SourcePackage: aptitude
Uname: Linux 2.6.31-16-generic i686
summary: |
- Overwrites ~/.aptitude/config + Overwrites ~/.aptitude/config with root permissions if run under sudo |
To post a comment you must log in.
Status changed to 'Confirmed' because the bug affects multiple users.