It looks like the root cause of this issue is that the post-install
script uses the mktemp command when the current user is root and the
default Ubuntu configuration sets $TMPDIR to /tmp/user/uid# so the
temporary file that gets created is in /tmp/user/0.  Later, the script
switches to the gitolite3 user and tries to read the file that was
created with mktemp (as the gitolite3 user, but that read fails because
the gitolite3 user doesn't have permission to navigate the parent
directories of the file.  Changing permissions on the parent directories
is a security problem, so the best solution is probably to set the
$TMPDIR environment variable to some world-readable directory, such as
/tmp, at the start of the post-install script.  So, a one-line addition
to the debian/postinst script probably fixes the issue.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1934735

Title:
  package gitolite3 3.6.11-2 failed to install/upgrade: installed
  gitolite3 package post-installation script subprocess returned error
  exit status 1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gitolite3/+bug/1934735/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to