[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Michael Terry]

Yes, Launchpad picked the wrong description.  Here is the one that fixed
it:

deja-dup (35.4-0ubuntu1) artful; urgency=medium

  * New upstream release
- Adds support for GNOME Online Accounts
- Improves dynamic installation support for backend dependencies
- Fixes status icon in non-GNOME desktops (LP: #1592480)
- Improves sudo prompt when restoring outside HOME (LP: #1674121)
- Fixes password prompt loop with a bad gpg config (LP: #1710309)
- Fixes vertical size of backup detail output pane (LP: #1710491)
  * debian/rules:
- Tell deja-dup which packages to install for the various backends
  * debian/control.in:
- Update dependencies
- Drop deja-dup-backend-* meta packages, they are no longer needed
  * debian/patches/install-pygi.patch:
- Drop, no longer needed

 -- Michael Terry   Thu, 17 Aug 2017 11:10:48 -0400

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Released
Status in deja-dup package in Ubuntu:
  Fix Released

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Vej]

@Michael Terry: The description of the patch does not seem to have
anything to do with this bug. Is this really fixed for Ubuntu?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Released
Status in deja-dup package in Ubuntu:
  Fix Released

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Launchpad Bug Tracker]

This bug was fixed in the package deja-dup - 35.4-0ubuntu3

---
deja-dup (35.4-0ubuntu3) artful; urgency=medium

  * debian/patches/allow-no-packagekit.patch:
- Cherry-pick patch from upstream git that properly fixes our tests
  in autopkgtests where packagekit isn't installed.

 -- Michael Terry   Sat, 19 Aug 2017 14:24:51 -0400

** Changed in: deja-dup (Ubuntu)
   Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Released
Status in deja-dup package in Ubuntu:
  Fix Released

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Amr Ibrahim]

Thanks Michael. I was worried that giving sudo authorisation to restore
files might have security implications.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Released
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Michael Terry]

That behavior hadn't changed: permissions and ownership should be
restored to original values too

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Released
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Amr Ibrahim]

One question, does that mean that the restored files outside $HOME will
be owned by root or have root permissions?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Released
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Launchpad Bug Tracker]

** Branch linked: lp:~ubuntu-desktop/deja-dup/ubuntu

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Released
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Michael Terry]

** Changed in: deja-dup
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Released
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Amr Ibrahim]

Exactly, my restore was to a location outside $HOME, however, that
location did not need super privileges for file operations. Deja Dup
could be smarter about that.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Committed
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Michael Terry]

Amr, I don't know about your case specifically, but in Christopher's
case, it was because he was restoring to two different users' home
directories. Basically, anytime you are restoring outside your own home
directory, we go to root. We *could* try to be smarter there, but it
would be a fair amount of effort for (imho) small gain. But you're right
that it would be better if we were that smart.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Committed
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Amr Ibrahim]

Thanks Michael. But should it prompt for authentication even for
restoring to only user locations? That what happened to me in Xenial. I
was restoring folders and files to a user location, which doesn't need
any super privileges for file operations, when that message came up.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Committed
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Michael Terry]

Code in master should have a less cryptic message.  Now says "Privileges
are required to restore files to system locations"

** Changed in: deja-dup
   Status: Triaged => Fix Committed

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Fix Committed
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Amr Ibrahim]

** Tags added: xenial

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Triaged
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Amr Ibrahim]

Also affects Xenial. Could be a security issue.

** Information type changed from Public to Public Security

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Triaged
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Vej]

@Christopher Thank you for the settings. The option "org.gnome.DejaDup
root-prompt true" might cause this. I do not know (yet) when and why
this is set. This might need to be looked into by an developer. But the
prompt comes from Déjà Dup and should indicate so. I agree.

** Changed in: deja-dup (Ubuntu)
   Status: Incomplete => New

** Changed in: deja-dup (Ubuntu)
   Status: New => Triaged

** Changed in: deja-dup (Ubuntu)
   Importance: Undecided => Medium

** Also affects: deja-dup
   Importance: Undecided
   Status: New

** Changed in: deja-dup
   Status: New => Triaged

** Changed in: deja-dup
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in Déjà Dup:
  Triaged
Status in deja-dup package in Ubuntu:
  Triaged

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Christopher Barrington-Leigh]

Result of following attached:

gsettings list-recursively org.gnome.DejaDup > /tmp/deja-dup.gsettings

** Attachment added: "deja-dup.gsettings"
   
https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1674121/+attachment/4841599/+files/deja-dup.gsettings

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in deja-dup package in Ubuntu:
  Incomplete

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

[Desktop-packages] [Bug 1674121] Re: "Restore" asks for cryptic authentication to run /bin/sh as superuser

[Vej]

Hello Christopher!

Could you please provide us with the file /tmp/deja-dup.gsettings after running 
the following line (you may want to scrub the file of any incriminating file 
names or details):
gsettings list-recursively org.gnome.DejaDup > /tmp/deja-dup.gsettings

** Changed in: deja-dup (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to deja-dup in Ubuntu.
https://bugs.launchpad.net/bugs/1674121

Title:
  "Restore" asks for cryptic authentication to run /bin/sh as superuser

Status in deja-dup package in Ubuntu:
  Incomplete

Bug description:
  I am trying to restore a full backup to an external hard drive.
  After 20 minutes or so, a cryptic gui popup arises which says that "some 
process" wants sudo authentication to run /bin/sh

  It is surely a bug to generate such a vague request for sudo use.

  I note it has been this way since 2013
  (https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079553 which
  has been unaddressed, so the outcome of denying this request is still
  a great pain), but I am pointing out that this kind of permission
  request is itself a bug, if not a security risk because it teaches
  users to give that kind of permission to an unknown script.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: deja-dup 34.2-0ubuntu3.1
  ProcVersionSignature: Ubuntu 4.8.0-42.45-generic 4.8.17
  Uname: Linux 4.8.0-42-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.2
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sun Mar 19 12:35:43 2017
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2016-02-12 (400 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  SourcePackage: deja-dup
  UpgradeStatus: Upgraded to yakkety on 2017-01-21 (56 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1674121/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp