[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
Yes, Launchpad picked the wrong description. Here is the one that fixed it: deja-dup (35.4-0ubuntu1) artful; urgency=medium * New upstream release - Adds support for GNOME Online Accounts - Improves dynamic installation support for backend dependencies - Fixes status icon in non-GNOME desktops (LP: #1592480) - Improves sudo prompt when restoring outside HOME (LP: #1674121) - Fixes password prompt loop with a bad gpg config (LP: #1710309) - Fixes vertical size of backup detail output pane (LP: #1710491) * debian/rules: - Tell deja-dup which packages to install for the various backends * debian/control.in: - Update dependencies - Drop deja-dup-backend-* meta packages, they are no longer needed * debian/patches/install-pygi.patch: - Drop, no longer needed -- Michael Terry Thu, 17 Aug 2017 11:10:48 -0400 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Released Status in deja-dup package in Ubuntu: Fix Released Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
@Michael Terry: The description of the patch does not seem to have anything to do with this bug. Is this really fixed for Ubuntu? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Released Status in deja-dup package in Ubuntu: Fix Released Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
This bug was fixed in the package deja-dup - 35.4-0ubuntu3 --- deja-dup (35.4-0ubuntu3) artful; urgency=medium * debian/patches/allow-no-packagekit.patch: - Cherry-pick patch from upstream git that properly fixes our tests in autopkgtests where packagekit isn't installed. -- Michael Terry Sat, 19 Aug 2017 14:24:51 -0400 ** Changed in: deja-dup (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Released Status in deja-dup package in Ubuntu: Fix Released Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
Thanks Michael. I was worried that giving sudo authorisation to restore files might have security implications. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Released Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
That behavior hadn't changed: permissions and ownership should be restored to original values too -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Released Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
One question, does that mean that the restored files outside $HOME will be owned by root or have root permissions? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Released Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
** Branch linked: lp:~ubuntu-desktop/deja-dup/ubuntu -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Released Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
** Changed in: deja-dup Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Released Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
Exactly, my restore was to a location outside $HOME, however, that location did not need super privileges for file operations. Deja Dup could be smarter about that. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Committed Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
Amr, I don't know about your case specifically, but in Christopher's case, it was because he was restoring to two different users' home directories. Basically, anytime you are restoring outside your own home directory, we go to root. We *could* try to be smarter there, but it would be a fair amount of effort for (imho) small gain. But you're right that it would be better if we were that smart. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Committed Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
Thanks Michael. But should it prompt for authentication even for restoring to only user locations? That what happened to me in Xenial. I was restoring folders and files to a user location, which doesn't need any super privileges for file operations, when that message came up. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Committed Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
Code in master should have a less cryptic message. Now says "Privileges are required to restore files to system locations" ** Changed in: deja-dup Status: Triaged => Fix Committed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Fix Committed Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
** Tags added: xenial -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Triaged Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
Also affects Xenial. Could be a security issue. ** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Triaged Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
@Christopher Thank you for the settings. The option "org.gnome.DejaDup root-prompt true" might cause this. I do not know (yet) when and why this is set. This might need to be looked into by an developer. But the prompt comes from Déjà Dup and should indicate so. I agree. ** Changed in: deja-dup (Ubuntu) Status: Incomplete => New ** Changed in: deja-dup (Ubuntu) Status: New => Triaged ** Changed in: deja-dup (Ubuntu) Importance: Undecided => Medium ** Also affects: deja-dup Importance: Undecided Status: New ** Changed in: deja-dup Status: New => Triaged ** Changed in: deja-dup Importance: Undecided => Medium -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in Déjà Dup: Triaged Status in deja-dup package in Ubuntu: Triaged Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
Result of following attached: gsettings list-recursively org.gnome.DejaDup > /tmp/deja-dup.gsettings ** Attachment added: "deja-dup.gsettings" https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1674121/+attachment/4841599/+files/deja-dup.gsettings -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in deja-dup package in Ubuntu: Incomplete Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser
Hello Christopher! Could you please provide us with the file /tmp/deja-dup.gsettings after running the following line (you may want to scrub the file of any incriminating file names or details): gsettings list-recursively org.gnome.DejaDup > /tmp/deja-dup.gsettings ** Changed in: deja-dup (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1674121 Title: "Restore" asks for cryptic authentication to run /bin/sh as superuser Status in deja-dup package in Ubuntu: Incomplete Bug description: I am trying to restore a full backup to an external hard drive. After 20 minutes or so, a cryptic gui popup arises which says that "some process" wants sudo authentication to run /bin/sh It is surely a bug to generate such a vague request for sudo use. I note it has been this way since 2013 (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which has been unaddressed, so the outcome of denying this request is still a great pain), but I am pointing out that this kind of permission request is itself a bug, if not a security risk because it teaches users to give that kind of permission to an unknown script. ProblemType: Bug DistroRelease: Ubuntu 16.10 Package: deja-dup 34.2-0ubuntu3.1 ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17 Uname: Linux 4.8.0-42-generic x86_64 ApportVersion: 2.20.3-0ubuntu8.2 Architecture: amd64 CurrentDesktop: Unity Date: Sun Mar 19 12:35:43 2017 EcryptfsInUse: Yes InstallationDate: Installed on 2016-02-12 (400 days ago) InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021) SourcePackage: deja-dup UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1674121/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp