Bug#1008818: needrestart: creates root-owned .rpmdb in non-root user $HOME, possibly corrupting existing one

2022-04-14 Thread Thorsten Glaser
reassign 1008818 rpm
found 1008818 4.16.1.2+dfsg1-3
affects 1008818 needrestart
thanks

Patrick Matthäi dixit:

> Since this file also comes from rpm itself I think you agree this is not a bug
> in needrestart?

Not sure.

On one side, “rpm -qa” will create the directory in my home directory as
myself, but “sudo rpm -qa” will do the wrong thing. On the other hand,
it’s needrestart that calls it…

I agree it’s probably worth trying to reassign to rpm to get this fixed
also for the normal “sudo rpm -qa” use case first, before adding extra
workarounds in needrestart.

(Unsure if either fix would make it into stable…)

bye,
//mirabilos
-- 
Gestern Nacht ist mein IRC-Netzwerk explodiert. Ich hatte nicht damit
gerechnet, darum bin ich blutverschmiert… wer konnte ahnen, daß SIE so
reagier’n… gestern Nacht ist mein IRC-Netzwerk explodiert~~~
(as of 2021-06-15 The MirOS Project temporarily reconvenes on OFTC)



Processed: Re: Bug#1008818: needrestart: creates root-owned .rpmdb in non-root user $HOME, possibly corrupting existing one

2022-04-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> reassign 1008818 rpm
Bug #1008818 [needrestart] needrestart: creates root-owned .rpmdb in non-root 
user $HOME, possibly corrupting existing one
Bug reassigned from package 'needrestart' to 'rpm'.
No longer marked as found in versions needrestart/3.5-4.
Ignoring request to alter fixed versions of bug #1008818 to the same values 
previously set
> found 1008818 4.16.1.2+dfsg1-3
Bug #1008818 [rpm] needrestart: creates root-owned .rpmdb in non-root user 
$HOME, possibly corrupting existing one
Marked as found in versions rpm/4.16.1.2+dfsg1-3.
> affects 1008818 needrestart
Bug #1008818 [rpm] needrestart: creates root-owned .rpmdb in non-root user 
$HOME, possibly corrupting existing one
Added indication that 1008818 affects needrestart
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1008818: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1008818
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1008818: needrestart: creates root-owned .rpmdb in non-root user $HOME, possibly corrupting existing one

2022-04-13 Thread Thorsten Glaser
Patrick Matthäi dixit:

> But how did it happened, that .rpmdb is owned by root in your own user
> directory?

rpm is installed, I run sudo apt-get something.

> Same in my test, if I use $ sudo needrestart => .rpmdb of ~root/ is used

Hmm.

Maybe !env_reset in sudoers would do this…

bye,
//mirabilos
-- 
(gnutls can also be used, but if you are compiling lynx for your own use,
there is no reason to consider using that package)
-- Thomas E. Dickey on the Lynx mailing list, about OpenSSL



Bug#1008818: needrestart: creates root-owned .rpmdb in non-root user $HOME, possibly corrupting existing one

2022-04-02 Thread Thorsten Glaser
Package: needrestart
Version: 3.5-4
Severity: grave
Justification: causes non-serious data loss
X-Debbugs-Cc: t...@mirbsd.de

I did notice root-owned .rpmdb directories in my user home and,
after log inspection, was able to track it down to apt-get runs.

Some reproducing and grepping later I found it’s needrestart
which does that.


-- Package-specific info:
needrestart output:
Your outdated processes:
dbus-daemon[18689], dconf-service[25185], dirmngr[19601], lynx[690], 
mksh[13426, 2187, 19552], screen[2866, 2185], xdg-desktop-por[25155], 
xdg-document-po[25162], xdg-permission-[25166]



-- System Information:
Debian Release: 11.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'stable-debug'), (500, 'oldstable-updates'), (500, 'oldoldstable'), (500, 
'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-8-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_WARN
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)

Versions of packages needrestart depends on:
ii  binutils   2.35.2-2
ii  dpkg   1.20.9
ii  gettext-base   0.21-4
ii  libintl-perl   1.26-3
ii  libmodule-find-perl0.15-1
ii  libmodule-scandeps-perl1.30-1
ii  libproc-processtable-perl  0.59-2+b1
ii  libsort-naturally-perl 1.03-2
ii  libterm-readkey-perl   2.38-1+b2
ii  perl   5.32.1-4+deb11u2
ii  xz-utils   5.2.5-2

Versions of packages needrestart recommends:
ii  sysvinit-core  2.96-7+deb11u1

Versions of packages needrestart suggests:
ii  iucode-tool  2.3.1-1
pn  needrestart-session | libnotify-bin  

-- no debconf information