I am using Lubuntu 17.04, and when using Synaptic, I get the "...unsandboxed..." message after a completed download. One message per download. (Why only one? The package I just downloaded for testing purposes pulled in six or eight other packages, but only the last was shown in the message.)
The message occurs in an error window: a large triangle with an exclamation markis shown, with the large text "An error occurred", then (smaller) "The following details are provided:" So to the user, it does not LOOK like a one-line minor warning... Synaptic does not refresh the package listing until after dismissing the window. I now provide 3 examples of the detail provided: W: Download is performed unsandboxed as root as file '/var/cache/apt/archives/partial/libreoffice-style- galaxy_1%3a5.3.1-0ubuntu2_all.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied) W: Download is performed unsandboxed as root as file '/var/cache/apt/archives/partial/gstreamer1.0-pulseaudio_1.10.4-1ubuntu1_amd64.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied) W: Download is performed unsandboxed as root as file '/var/cache/apt/archives/partial/speedtest-cli_1.0.0-1_all.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied) /var/cache/apt/archives/partial and /var/lib/update-notifier/package-data-downloads/partial both have Owner (Create and delete files) and Group (Access files) owned by Root. /etc/passwd contains a line: _apt:x:105:65534::/nonexistent:/bin/false ...so the user does exist, but is not assigned to the two directories comment #43 says that apparently I should do a: sudo chown _apt <...each of the two above directories...> Should I? How/when are these directories created in the first place? Surely whatever created them should have set them up with _apt as owner...? I don't think I have received this message from update-notifier, but am not sure... -------------------------------------------------- scott@scott-ASUS-M2N68-AMPLUS:~$ uname -a Linux scott-ASUS-M2N68-AMPLUS 4.10.0-21-generic #23-Ubuntu SMP Fri Apr 28 16:14:22 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux scott@scott-ASUS-M2N68-AMPLUS:~$ lsb_release -dsc Ubuntu 17.04 zesty scott@scott-ASUS-M2N68-AMPLUS:~$ echo $DESKTOP_SESSION Lubuntu scott@scott-ASUS-M2N68-AMPLUS:~$ apt --version apt 1.4 (amd64) Synaptic version 0.84.2 update-notifier version 3.179 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apt in Ubuntu. https://bugs.launchpad.net/bugs/1522675 Title: Warning messages about unsandboxed downloads Status in apt package in Ubuntu: Fix Released Status in update-notifier package in Ubuntu: Confirmed Status in apt package in Debian: Fix Released Status in synaptic package in Debian: New Bug description: Recently we got new versions for synaptic 0.82+build1 & apt 1.1.3, but now get that error when installing/upgrading some packages: Setting up libc6-dbg:amd64 (2.21-0ubuntu5) ... Processing triggers for libc-bin (2.21-0ubuntu5) ... W: Can't drop privileges for downloading as file '/root/.synaptic/tmp//tmp_cl' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied) From nautilus, i'm seeing a /root/ folder locked (x on its icon) and the folder is empty (no /.synaptic/ sub-folder or file), so the above error. oem@u64:~$ ls -l .synaptic total 4 -rw-rw-r-- 1 oem oem 0 Aug 25 11:19 options -rw-rw-r-- 1 oem oem 236 Aug 25 11:19 synaptic.conf oem@u64:~$ ls -l /var/lib/apt/lists/ .... -rw-r----- 1 root root 0 Sep 20 06:36 lock drwx------ 2 _apt root 16384 Sep 24 15:25 partial ...... oem@u64:~$ sudo ls -l /var/lib/update-notifier/package-data-downloads/ ..... drwxr-xr-x 2 _apt root 4096 Sep 22 23:33 partial ProblemType: Bug DistroRelease: Ubuntu 16.04 Package: synaptic 0.82+build1 ProcVersionSignature: Ubuntu 4.3.0-1.10-generic 4.3.0 Uname: Linux 4.3.0-1-generic x86_64 NonfreeKernelModules: nvidia ApportVersion: 2.19.2-0ubuntu8 Architecture: amd64 CurrentDesktop: GNOME Date: Fri Dec 4 05:23:25 2015 SourcePackage: synaptic UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1522675/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp