upgrade to gutsy requires user to make poor security choice

[Chris Thomas (CTho)]

1. System->Administration->Upgrade Manager
2. Click "Upgrade" next to "New distribution release '7.10' is available"
3. Click "Upgrade"
4. Observe "Enter your password to perform administrative tasks" prompt. It says, "The application '/tmp/tmpXf8_U1/gutsy' lets you modify essential parts of your system". In general, it's probably bad practice to get users in the habit of giving root privileges to random files in /tmp.

[Jonathan Prior (behe)]

This would probably mean instead of installing the System Upgrade helper in the /tmp folder, it would be installed in /bin or /usr/bin or somewhere where it could be considered as a "proper" program, even if it is going to be removed after use.

[Michael Vogt (mvo)]

Thanks for your bugreport.

This is fixed in my bzr tree and will be part of the next upload into hardy. If we want this for gutsy, we will have to issue a SRU.

[Jonathan Prior (behe)]

So where is the upgrade manager installed to in your tree? Is it /usr/bin like I suggested?

[Launchpad Janitor (janitor)]

This bug was fixed in the package update-manager - 1:0.87.18

---------------
update-manager (1:0.87.18) hardy; urgency=low

  * DistUpgrade/DistUpgradeCache.py:
    - remove mail-notificaton, gnome-translate from hardy
      quirks list (LP: #215690)
  * UpdateManager/DistUpgradeFetcher.py:
    - use sensible gksu prompt when asking for release
      upgrade (LP: #161888)

 -- Michael Vogt <email address hidden> Mon, 14 Apr 2008 21:44:43 +0200

[Sergio Zanchetta (primes2h)]

The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life -
http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the
Gutsy task.