Public bug reported:
The ltsp-server package diverts (in the client chroot) /sbin/start-stop-daemon
to
/sbin/start-stop-daemon.real. The new start-stop-daemon is a simple wrapper
that
calls start-stop-daemon.real if LTSP_HANDLE_DAEMONS is not set to false.
Unfortunately
the wrapper passes on the parameters using $*, which doesn't handle quoted
parameters
correctly. I noticed this because /etc/cron.daily/man-db does
start-stop-daemon --start --pidfile /dev/null --startas /bin/sh \
--oknodo --chuid man -- -c \
"find /var/cache/man -type f -name '*.gz' -atime +6 -print0 | \
xargs -r0 rm -f"
and the find-piped-to-xargs part gets expanded to the wrong thing by the
start-stop-daemon
wrapper, causing the contents of the entire root filesystem to be dumped to the
output.
This can be easily fixed as follows:
--- /usr/share/ltsp/scripts/start-stop-daemon.orig 2009-08-26
09:35:44.000000000 +0200
+++ /usr/share/ltsp/scripts/start-stop-daemon 2009-08-26 09:35:57.000000000
+0200
@@ -4,5 +4,5 @@
#
if [ "$LTSP_HANDLE_DAEMONS" != "false" ]; then
- /sbin/start-stop-daemon.real $*
+ /sbin/start-stop-daemon.real "$@"
fi
** Affects: ltsp (Ubuntu)
Importance: Undecided
Status: New
--
[PATCH] wrong parameter quoting in diversion of start-stop-daemon
https://bugs.launchpad.net/bugs/419081
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
