Re: [Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-09-01 Thread Dustin Kirkland
Sure, no problem, Martin. Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/830850 Title: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group To manage notif

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-09-01 Thread Launchpad Bug Tracker
This bug was fixed in the package ecryptfs-utils - 91-0ubuntu1 --- ecryptfs-utils (91-0ubuntu1) oneiric; urgency=low [ Diego E. "Flameeyes" Pettenò ] * configure.ac: - fix reliance on nss-config, which hinders cross-compilation [ Marc Deslauriers ] * src/utils/mount.ecryp

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-09-01 Thread Martin Pitt
I'm afraid we can't afford yet another respin, the release is today. But as this was fixed in stables, I suppose it can also be fixed with an update in oneiric. Moving milestone. ** Changed in: ecryptfs-utils (Ubuntu Oneiric) Milestone: ubuntu-11.10-beta-1 => ubuntu-11.10-beta-2 -- You recei

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-08-31 Thread Dustin Kirkland
** Also affects: ecryptfs-utils (Ubuntu Oneiric) Importance: High Assignee: Marc Deslauriers (mdeslaur) Status: Fix Released ** Changed in: ecryptfs-utils (Ubuntu Oneiric) Milestone: None => oneiric-updates ** Changed in: ecryptfs-utils (Ubuntu Oneiric) Milestone: oneiric-u

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-08-24 Thread Kasper Dupont
Something is also creating /etc/mtab.fuselock with incorrect group. It doesn't always happen simultaneously though as on my system I found that /etc/mtab and /etc/mtab.fuselock had two different gropus (both incorrect). -- You received this bug notification because you are a member of Ubuntu Bugs

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-08-23 Thread Marc Deslauriers
** Visibility changed to: Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/830850 Title: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group To manage notific

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-08-23 Thread Launchpad Bug Tracker
This bug was fixed in the package ecryptfs-utils - 87-0ubuntu1.2 --- ecryptfs-utils (87-0ubuntu1.2) natty-security; urgency=low * SECURITY UPDATE: wrong mtab ownership and permissions (LP: #830850) - debian/patches/CVE-2011-3145.patch: also set gid and umask before updatin

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-08-22 Thread Dan Rosenberg
Sigh. For the record, this issue existed prior to the recent fixes...sorry for missing it. Additionally, this by itself doesn't seem to be a vulnerability, since a mis-assigned group ID on mtab doesn't actually allow the unprivileged user to cross any privilege boundaries. But good catch, definit

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-08-22 Thread Marc Deslauriers
Thanks for reporting this issue. We are working on a fix. ** Changed in: ecryptfs-utils (Ubuntu) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-3145 -- You received this bug notification because you are a member

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-08-22 Thread Marc Deslauriers
** Changed in: ecryptfs-utils (Ubuntu) Status: New => Confirmed ** Changed in: ecryptfs-utils (Ubuntu) Importance: Undecided => High ** Visibility changed to: Private ** This bug has been flagged as a security vulnerability -- You received this bug notification because you are a memb

[Bug 830850] Re: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

2011-08-21 Thread John L. Templer
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/830850 Title: mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group To manage notifications about this bug go to: https://bugs.