| 2020-12-02 22:15:41 |
Brian Murray |
bug |
|
|
added bug |
| 2020-12-02 22:26:45 |
Brian Murray |
nominated for series |
|
Ubuntu Xenial |
|
| 2020-12-02 22:26:45 |
Brian Murray |
bug task added |
|
apport (Ubuntu Xenial) |
|
| 2020-12-02 22:26:45 |
Brian Murray |
nominated for series |
|
Ubuntu Groovy |
|
| 2020-12-02 22:26:45 |
Brian Murray |
bug task added |
|
apport (Ubuntu Groovy) |
|
| 2020-12-02 22:26:45 |
Brian Murray |
nominated for series |
|
Ubuntu Bionic |
|
| 2020-12-02 22:26:45 |
Brian Murray |
bug task added |
|
apport (Ubuntu Bionic) |
|
| 2020-12-02 22:26:45 |
Brian Murray |
nominated for series |
|
Ubuntu Focal |
|
| 2020-12-02 22:26:45 |
Brian Murray |
bug task added |
|
apport (Ubuntu Focal) |
|
| 2020-12-02 22:27:52 |
Brian Murray |
tags |
|
fr-978 |
|
| 2020-12-02 22:29:18 |
Brian Murray |
apport (Ubuntu): assignee |
|
Brian Murray (brian-murray) |
|
| 2020-12-02 22:29:21 |
Brian Murray |
apport (Ubuntu): status |
New |
In Progress |
|
| 2020-12-02 22:29:24 |
Brian Murray |
apport (Ubuntu): importance |
Undecided |
High |
|
| 2020-12-02 22:29:29 |
Brian Murray |
apport (Ubuntu Bionic): importance |
Undecided |
High |
|
| 2020-12-02 22:29:33 |
Brian Murray |
apport (Ubuntu Xenial): importance |
Undecided |
High |
|
| 2020-12-02 22:29:38 |
Brian Murray |
apport (Ubuntu Focal): importance |
Undecided |
High |
|
| 2020-12-02 22:29:43 |
Brian Murray |
apport (Ubuntu Bionic): assignee |
|
Brian Murray (brian-murray) |
|
| 2020-12-02 22:29:47 |
Brian Murray |
apport (Ubuntu Focal): assignee |
|
Brian Murray (brian-murray) |
|
| 2020-12-02 22:29:50 |
Brian Murray |
apport (Ubuntu Groovy): assignee |
|
Brian Murray (brian-murray) |
|
| 2020-12-02 22:30:04 |
Brian Murray |
apport (Ubuntu Xenial): assignee |
|
Brian Murray (brian-murray) |
|
| 2020-12-02 22:30:09 |
Brian Murray |
apport (Ubuntu Groovy): importance |
Undecided |
High |
|
| 2020-12-02 22:50:33 |
Brian Murray |
description |
[Impact]
The apport-test-crashes package, which is used to test the Error Tracker deployments, fails produce crash files for binary applications since "various security hardening fixes" were included in apport. The problematic change is the dropping of supplemental groups in data/apport. This results in a PermissionError as it is not the root user who is calling /usr/share/apport/apport.
[Test Case]
The least convulted test case involves using the generate-sigsegv-crash.py script from apport-test-crashes. This ends up using a command similar to '/usr/share/apport/apport -p 4077 -s 11 -E /usr/bin/gnome-calculator < /tmp/20.10-gnome-calculator.core' which then will encounter the Traceback.
1) Comment out "check_lock()" in /usr/share/apport/apport (This is necessary as we are not running as root)
2) Put a copy of generate-sigsegv-crash.py on disk.
3) Run 'python3 /tmp/generate-sigsegv-crash.py cat'
4) Observe the following Traceback:
Traceback (most recent call last):
File "/tmp/tmpvkt5d266/apport", line 599, in <module>
drop_privileges(True)
File "/tmp/tmpvkt5d266/apport", line 125, in drop_privileges
os.setgroups([])
PermissionError: [Errno 1] Operation not permitted
With the version of apport from -proposed you'll receive no such Traceback.
[Regression Potential]
If there is an error in the python code we code see a new traceback for any and all crashes being generated, so ensure regular crash generation works too. |
[Impact]
The apport-test-crashes package, which is used to test the Error Tracker deployments, fails produce crash files for binary applications since "various security hardening fixes" were included in apport. The problematic change is the dropping of supplemental groups in data/apport. This results in a PermissionError as it is not the root user who is calling /usr/share/apport/apport.
[Test Case]
The least convulted test case involves using the generate-sigsegv-crash.py script from apport-test-crashes. This ends up using a command similar to '/usr/share/apport/apport -p 4077 -s 11 -E /usr/bin/gnome-calculator < /tmp/20.10-gnome-calculator.core' which then will encounter the Traceback.
1) Comment out "check_lock()" in /usr/share/apport/apport (This is necessary as we are not running as root)
2) Put a copy of generate-sigsegv-crash.py on disk.
3) Run 'python3 /tmp/generate-sigsegv-crash.py cat'
4) Observe the following Traceback:
Traceback (most recent call last):
File "/tmp/tmpvkt5d266/apport", line 599, in <module>
drop_privileges(True)
File "/tmp/tmpvkt5d266/apport", line 125, in drop_privileges
os.setgroups([])
PermissionError: [Errno 1] Operation not permitted
With the version of apport from -proposed you'll receive no such Traceback.
[Regression Potential]
If there is an error in the python code we code see a new traceback for any and all crashes being generated, so ensure regular crash generation works too.
apport-test-crashes code is here:
https://code.launchpad.net/~daisy-pluckers/error-tracker-deployment/test-crashes/ |
|
| 2020-12-03 15:27:49 |
Brian Murray |
apport (Ubuntu): status |
In Progress |
Fix Released |
|
| 2020-12-03 16:00:51 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-core-dev/ubuntu/groovy/apport/ubuntu |
|
| 2020-12-03 20:31:26 |
Brian Murray |
apport (Ubuntu Xenial): status |
New |
In Progress |
|
| 2020-12-03 20:31:28 |
Brian Murray |
apport (Ubuntu Bionic): status |
New |
In Progress |
|
| 2020-12-03 20:31:31 |
Brian Murray |
apport (Ubuntu Focal): status |
New |
In Progress |
|
| 2020-12-03 20:31:36 |
Brian Murray |
apport (Ubuntu Groovy): status |
New |
Incomplete |
|
| 2020-12-04 20:59:05 |
Steve Langasek |
apport (Ubuntu Focal): status |
In Progress |
Fix Committed |
|
| 2020-12-04 20:59:07 |
Steve Langasek |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2020-12-04 20:59:10 |
Steve Langasek |
bug |
|
|
added subscriber SRU Verification |
| 2020-12-04 20:59:14 |
Steve Langasek |
tags |
fr-978 |
fr-978 verification-needed verification-needed-focal |
|
| 2020-12-04 20:59:52 |
Steve Langasek |
apport (Ubuntu Groovy): status |
Incomplete |
Fix Committed |
|
| 2020-12-04 20:59:59 |
Steve Langasek |
tags |
fr-978 verification-needed verification-needed-focal |
fr-978 verification-needed verification-needed-focal verification-needed-groovy |
|
| 2020-12-04 21:00:56 |
Steve Langasek |
apport (Ubuntu Bionic): status |
In Progress |
Fix Committed |
|
| 2020-12-04 21:01:03 |
Steve Langasek |
tags |
fr-978 verification-needed verification-needed-focal verification-needed-groovy |
fr-978 verification-needed verification-needed-bionic verification-needed-focal verification-needed-groovy |
|
| 2020-12-04 21:01:48 |
Steve Langasek |
apport (Ubuntu Xenial): status |
In Progress |
Fix Committed |
|
| 2020-12-04 21:01:56 |
Steve Langasek |
tags |
fr-978 verification-needed verification-needed-bionic verification-needed-focal verification-needed-groovy |
fr-978 verification-needed verification-needed-bionic verification-needed-focal verification-needed-groovy verification-needed-xenial |
|
| 2020-12-04 23:28:16 |
Brian Murray |
tags |
fr-978 verification-needed verification-needed-bionic verification-needed-focal verification-needed-groovy verification-needed-xenial |
fr-978 verification-done-groovy verification-needed verification-needed-bionic verification-needed-focal verification-needed-xenial |
|
| 2020-12-04 23:37:08 |
Brian Murray |
tags |
fr-978 verification-done-groovy verification-needed verification-needed-bionic verification-needed-focal verification-needed-xenial |
fr-978 verification-done-focal verification-done-groovy verification-needed verification-needed-bionic verification-needed-xenial |
|
| 2020-12-04 23:43:30 |
Brian Murray |
tags |
fr-978 verification-done-focal verification-done-groovy verification-needed verification-needed-bionic verification-needed-xenial |
fr-978 verification-done-bionic verification-done-focal verification-done-groovy verification-needed verification-needed-xenial |
|
| 2020-12-04 23:50:42 |
Brian Murray |
tags |
fr-978 verification-done-bionic verification-done-focal verification-done-groovy verification-needed verification-needed-xenial |
fr-978 verification-done-bionic verification-done-focal verification-done-groovy verification-done-xenial verification-needed |
|
| 2020-12-04 23:51:15 |
Brian Murray |
tags |
fr-978 verification-done-bionic verification-done-focal verification-done-groovy verification-done-xenial verification-needed |
fr-978 verification-done verification-done-bionic verification-done-focal verification-done-groovy verification-done-xenial |
|
| 2020-12-14 18:27:58 |
Łukasz Zemczak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2020-12-14 18:27:57 |
Launchpad Janitor |
apport (Ubuntu Groovy): status |
Fix Committed |
Fix Released |
|
| 2020-12-14 18:47:01 |
Launchpad Janitor |
apport (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2020-12-14 18:55:48 |
Launchpad Janitor |
apport (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
| 2020-12-14 19:02:09 |
Launchpad Janitor |
apport (Ubuntu Xenial): status |
Fix Committed |
Fix Released |
|
