motd-news vs privacy / security / telemetry
https://bugs.launchpad.net/ubuntu/+source/base-files/+bug/1867424
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1637800
Title:
add a motd script for
This bug was fixed in the package base-files - 9.4ubuntu4.11
---
base-files (9.4ubuntu4.11) xenial; urgency=medium
* update-motd.d/50-motd-news: add cloud_id to user-agent string
(LP: #1840946)
* d/postinst.in, d/postrm: add missing dh_systemd_enable pieces. This
Xenial verification
No warnings or errors during upgrade:
Get:1 http://azure.archive.ubuntu.com/ubuntu xenial-proposed/main amd64
base-files amd64 9.4ubuntu4.11 [67.5 kB]
Fetched 67.5 kB in 0s (1,082 kB/s)
(Reading database ... 78928 files and directories currently installed.)
Preparing to
Hello Dustin, or anyone else affected,
Accepted base-files into xenial-proposed. The package will build now and
be available at https://launchpad.net/ubuntu/+source/base-
files/9.4ubuntu4.11 in a few hours, and then in the -proposed
repository.
Please help us by testing this new package. See
** Merge proposal linked:
https://code.launchpad.net/~ahasenack/ubuntu/+source/base-files/+git/base-files/+merge/373411
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1637800
Title:
add a motd
I'm addressing this in a new upload.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1637800
Title:
add a motd script for news
To manage notifications about this bug go to:
+ [ -d /run/systemd/system ]
+ systemctl --system daemon-reload
+ deb-systemd-invoke start motd-news.service
motd-news.service is a disabled or a static unit, not starting it.
+ [ -d /run/systemd/system ]
+ systemctl --system daemon-reload
+ deb-systemd-invoke start motd-news.timer
motd-news.timer
** Changed in: base-files (Ubuntu)
Importance: Undecided => Low
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1637800
Title:
add a motd script for news
To manage notifications about this bug go
I also noticed this when installing the package:
Setting up base-files (9.4ubuntu4.10) ...
motd-news.service is a disabled or a static unit, not starting it.
motd-news.timer is a disabled or a static unit, not starting it.
--
You received this bug notification because you are a member of Ubuntu
** Tags removed: verification-needed-xenial
** Tags added: verification-failed-xenial
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1637800
Title:
add a motd script for news
To manage
I installed the version of base-files from Ubuntu 18.04's proposed
repository and after installation of the package not timer was running
for motd-news. I rebooted to see if that would active the timer and it
did not.
bdmurray@clean-xenial-amd64:~$ ls -lh /var/cache/motd-news
-rw-r--r-- 1 root
Hello Dustin, or anyone else affected,
Accepted base-files into xenial-proposed. The package will build now and
be available at https://launchpad.net/ubuntu/+source/base-
files/9.4ubuntu4.9 in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See
Note: during verification, it would be good to also run the test case
from LP: #1829968.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1637800
Title:
add a motd script for news
To manage
** Tags added: id-5a6f7b80757e0c595cf34839
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1637800
Title:
add a motd script for news
To manage notifications about this bug go to:
@Jeremy: I think it would be more appropriate to say that the current
motd.ubuntu.com shows an item about an episode of a TV show, which
depicts Ubuntu being used in some IT task.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
> So, you promise it's not just going to return the output of GNU
fortune over and over?
https://bugs.launchpad.net/ubuntu/+source/base-files/+bug/1701068 is
confirmed proof what this ticket is for is now being used
inappropriately (unprofessionally).
--
You received this bug notification
** Changed in: base-files (Ubuntu Xenial)
Assignee: Dustin Kirkland (kirkland) => Steve Langasek (vorlon)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1637800
Title:
add a motd script for
"the news server can generate the most relevant message-of-the-day"
So, you promise it's not just going to return the output of GNU fortune
over and over?
And that the serverside will be hardened against exploitation? PS, do me
a favor and make sure it's written in a dynamic scripting language
As with any user agent string sent by any web browser, the intention is
such that the server can customize the response appropriately for user.
e.g. There may be a bug that affects ARM64 users, but not any other
architecture. There might be a kernel vulnerability that is only
exploitable
jeez, and i nearly missed
```
cpu="$(grep -m1 "^model name" /proc/cpuinfo | sed -e "s/.*: //" -e
"s:\s\+:/:g")"
```
So not just uptime, but you get
"Intel(R) Xeon(R) CPU E31230 @ 3.20GHz"
from me too?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
```
read up idle < /proc/uptime
uptime="uptime/$up/$idle"
USER_AGENT="curl/$curl_ver $lsb $platform $cpu $uptime"
```
Uh, okay, I can understand the curl version, the platform and the
cputype; but the uptime of my nodes is nobody's business but my own.
The platform and CPU type are exposed by
Why is this in base-files? You might seriously want to reconsider
adding a phone-home script to a package that can't be removed
considering what happened back a couple years with the amazon lens.
Especially with a user agent that unique.
--
You received this bug notification because you are a
Okay, reworked as a systemd timer. Tested here in a zesty LXD
container, working well.
** Patch added: "out.patch"
https://bugs.launchpad.net/ubuntu/+source/base-files/+bug/1637800/+attachment/4807148/+files/out.patch
--
You received this bug notification because you are a member of Ubuntu
@xnox:
Totally agreed on https. I just uploaded that fix to zesty, defaulting
to https://motd.ubuntu.com (which exists now, it didn't at the time),
and enforcing that all URLs should start with https://.
The .timer systemd unit + caching + periodic refresh is interesting,
indeed. I'll look
Please use .timer systemd unit to asynchronously fetch these news on
boot, and periodically thereafter (there is support for both stanzas),
do so safely from https, have templated news, and cache them, at the end
include the cached news into motd.
--
You received this bug notification because
"- fail quietly, gracefully, and quickly"
I'm not sure how a 2-second delay on login for people who firewall off
outside access can be qualified as "quickly".
I'm also skeptical in general here about this being a thing that should
be happening by default.
--
You received this bug notification
This bug was fixed in the package base-files - 9.6ubuntu7
---
base-files (9.6ubuntu7) zesty; urgency=medium
* etc/default/motd-news, update-motd.d/50-news: LP: #1637800
- add an update-motd script, that dynamically retrieves a
message-of-the-day from a news service,
** Description changed:
Add a new update-motd script for printing news and/or important notices.
+
+ == SRU ==
+
+ [IMPACT]
+ We should add important security messages or other news to the MOTD.
+
+ [TEST CASE]
+ Login to the system and ensure that the "news" section of the motd is
** Patch added: "1637800.patch"
https://bugs.launchpad.net/ubuntu/+source/base-files/+bug/1637800/+attachment/4769667/+files/1637800.patch
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1637800
29 matches
Mail list logo
