Ubuntu
ubuntu-advantage-tools package

  1. Bug #2024204
  2. Comment #1

Comment 1 for bug 2024204

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Is this a cause for concern?

tools/ua-dev-cloud-config.yaml

cloud-config
# Setup an ubuntu-advantage-tools development environment with cloud-init
packages:
 - git
 - make
runcmd:
 - git clone https://github.com/canonical/ubuntu-advantage-client.git /var/tmp/uac
 - cd /var/tmp/uac/
 - make deps
 - dpkg-buildpackage -us -uc
 - apt-get remove ubuntu-advantage-tools --assume-yes
 - dpkg -i /var/tmp/ubuntu-advantage-*deb

Can the cloud-init runtime guarantee that this will *never* run on anything except the first boot of a pristine system? This would be a super-easy route to root escalation.