[Desktop-packages] [Bug 1995105] [NEW] add-apt-repository fails if it encounters immutable sources.list.d entry

2022-10-28 Thread Martin Schmitt
Public bug reported:

Reason:

We're trying to protect an internal APT source from trivial accidental
modification by users (who do have sudo as root).

Steps to reproduce:

echo '# dummy' > /etc/apt/sources.list.d/dummy.list
chattr +i /etc/apt/sources.list.d/dummy.list
add-apt-repository -y ppa:longsleep/golang-backports

Expected behaviour:

New sources.list for the PPA gets created.

Observed behaviour:

Traceback (most recent call last):
  File "/usr/bin/add-apt-repository", line 364, in 
sys.exit(0 if addaptrepo.main() else 1)
  File "/usr/bin/add-apt-repository", line 357, in main
shortcut.add()
  File "/usr/lib/python3/dist-packages/softwareproperties/shortcuthandler.py", 
line 221, in add
self.add_source()
  File "/usr/lib/python3/dist-packages/softwareproperties/shortcuthandler.py", 
line 307, in add_source
sourceslist.save()
  File 
"/usr/lib/python3/dist-packages/softwareproperties/extendedsourceslist.py", 
line 391, in save
with open(filename, "w") as f:
PermissionError: [Errno 1] Operation not permitted: 
'/etc/apt/sources.list.d/dummy.list'

** Affects: software-properties (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to software-properties in Ubuntu.
https://bugs.launchpad.net/bugs/1995105

Title:
  add-apt-repository fails if it encounters immutable sources.list.d
  entry

Status in software-properties package in Ubuntu:
  New

Bug description:
  Reason:

  We're trying to protect an internal APT source from trivial accidental
  modification by users (who do have sudo as root).

  Steps to reproduce:

  echo '# dummy' > /etc/apt/sources.list.d/dummy.list
  chattr +i /etc/apt/sources.list.d/dummy.list
  add-apt-repository -y ppa:longsleep/golang-backports

  Expected behaviour:

  New sources.list for the PPA gets created.

  Observed behaviour:

  Traceback (most recent call last):
File "/usr/bin/add-apt-repository", line 364, in 
  sys.exit(0 if addaptrepo.main() else 1)
File "/usr/bin/add-apt-repository", line 357, in main
  shortcut.add()
File 
"/usr/lib/python3/dist-packages/softwareproperties/shortcuthandler.py", line 
221, in add
  self.add_source()
File 
"/usr/lib/python3/dist-packages/softwareproperties/shortcuthandler.py", line 
307, in add_source
  sourceslist.save()
File 
"/usr/lib/python3/dist-packages/softwareproperties/extendedsourceslist.py", 
line 391, in save
  with open(filename, "w") as f:
  PermissionError: [Errno 1] Operation not permitted: 
'/etc/apt/sources.list.d/dummy.list'

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/software-properties/+bug/1995105/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1971984] Re: pcscd 1.9.5-3 do not start automatically, only manual

2022-05-16 Thread Martin Schmitt
We're seeing this same issue. The postinst script in the 22.04 package
seems to be missing a few lines that were still there in 21.10, one of
which would be the one that executes systemctl enable pcscd.socket.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to pcsc-lite in Ubuntu.
https://bugs.launchpad.net/bugs/1971984

Title:
  pcscd 1.9.5-3 do not start automatically, only manual

Status in pcsc-lite package in Ubuntu:
  Confirmed

Bug description:
  Ubuntu Mate 22.04 with the latest updates.
  Problem is present with internal smart-card reader and also external usb 
smart-card reader.

  eid-viewer sees no card reader,but When i do:

  sudo pcscd -f

  it is working, also following the tips of Ludovic:
  
https://ludovicrousseau.blogspot.com/2011/11/pcscd-auto-start-using-systemd.html

  sudo systemctl stop pcscd.socket
  sudo systemctl start pcscd.socket

  It is working until next restart.

  libacsccid1  version: 1.1.8-1
  libccid version: 1.5.0-2
  pcscd version: 1.9.5-3
  eid-archive version: 2022.3
  eid-mw version: 5.0.28v5.0.28-0u2204-1
  eid-viewer version: 5.0.28v5.0.28-0u2204-1

  In Firefox, my eid card is then also recognized, but only in the ESR
  version, but this is a know Mozilla bug.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pcsc-lite/+bug/1971984/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1970182] Re: Kerberos does not work anymore on Firefox under Ubuntu 22.04

2022-05-02 Thread Martin Schmitt
The workaround provided by Ronzo is much appreciated, but considering
that this will mostly be relevant in larger environments with central
authentication, keeping the cached credentials openly in the middle of
the home directory may at least open support issues with users wondering
what that file may be, deleting it, and so on.

We've also experimented with other paths, which either fails due to
missing access permissions or the requirement to start Firefox with a
different $KRB5CCNAME environment than the default.

If the Snap could access the krb5.conf(5) default default_ccache_name,
that would be a huge step forward.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1970182

Title:
  Kerberos does not work anymore on Firefox under Ubuntu 22.04

Status in firefox package in Ubuntu:
  Confirmed

Bug description:
  There seems to be a problem with the AppArmor config regarding Firefox
  and Kerberos.

  journalctl -f | grep DEN
  Apr 25 10:26:48 chupacabra audit[3575]: AVC apparmor="DENIED" 
operation="open" profile="snap.firefox.firefox" name="/etc/gss/mech.d/" 
pid=3575 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
  Apr 25 10:26:48 chupacabra kernel: audit: type=1400 
audit(1650875208.417:138): apparmor="DENIED" operation="open" 
profile="snap.firefox.firefox" name="/etc/gss/mech.d/" pid=3575 comm="firefox" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1970182/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp