** Also affects: xorg-server (Ubuntu)
Importance: Undecided
Status: New
** Changed in: xorg-server (Ubuntu Bionic)
Assignee: (unassigned) => Marc Deslauriers (mdeslaur)
** Changed in: xorg-server (Ubuntu Bionic)
Importance: Undecided => High
** Changed in: xorg-server (Ubuntu Bionic)
Status: New => In Progress
** Changed in: xorg-server (Ubuntu Bionic)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/1735929
Title:
security problems with incorrect permissions for ubuntu 17.10
Status in dconf:
Confirmed
Status in gnome-session:
Fix Released
Status in d-conf package in Ubuntu:
Fix Released
Status in dconf package in Ubuntu:
Triaged
Status in gnome-session package in Ubuntu:
Fix Released
Status in session-migration package in Ubuntu:
Fix Released
Status in xorg-server package in Ubuntu:
Fix Committed
Status in d-conf source package in Bionic:
Fix Released
Status in dconf source package in Bionic:
Triaged
Status in gnome-session source package in Bionic:
Fix Released
Status in session-migration source package in Bionic:
Fix Released
Status in xorg-server source package in Bionic:
Fix Committed
Bug description:
The release of Ubuntu you are using (lsb_release -rd):
Description: Ubuntu 17.10
Release: 17.10
This is a fresh installation of Ubuntu 17.10 from the mini.iso.
I select only default options + [Ubuntu Desktop] installation.
What you expected to happen:
My home folder contains the following folders with correct and safe
permissions after the first login:
drwx------ 11 user user 4096 Dec 2 17:40 .config
drwx------ 3 user user 4096 Dec 2 17:39 .local
What happened instead:
I received these folders after the first login:
drwxr-xr-x 11 user user 4096 Dec 2 17:40 .config
drwxr-xr-x 3 user user 4096 Dec 2 17:39 .local
It is not safe. Any user can access to my .config folders and read for
example my mail databases
I'm trying to create a new user...:
sudo useradd -m user2
sudo passwd user2
... and login then.
It has the same problem:
drwxr-xr-x 10 user2 user2 4096 Dec 2 19:44 .config
drwxr-xr-x 3 user2 user2 4096 Dec 2 19:44 .local
To manage notifications about this bug go to:
https://bugs.launchpad.net/dconf/+bug/1735929/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
