Public bug reported:

APT currently launches dpkg in the same environment as it is launched in
leaking all sorts of environment variables to it, only overriding PATH
with a sensible default.

This is suboptimal, apt should clean the environment more thoroughly or
populate a clean environment from scratch.

Questions to answer:

* Perhaps it can reuse systemd or sudo or pam mechanisms?
* If not, what can we copy/pass-through? e.g. TERM needs to be kept the same.
* What to do about hooks
* umask(022) before executing dpkg (anything?), also need correct umask for 
lists for sure.

** Affects: apt (Ubuntu)
     Importance: Medium
         Status: Triaged

** Changed in: apt (Ubuntu)
   Importance: Undecided => Medium

** Changed in: apt (Ubuntu)
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1996177

Title:
  Cleaner environment for dpkg execution

Status in apt package in Ubuntu:
  Triaged

Bug description:
  APT currently launches dpkg in the same environment as it is launched
  in leaking all sorts of environment variables to it, only overriding
  PATH with a sensible default.

  This is suboptimal, apt should clean the environment more thoroughly
  or populate a clean environment from scratch.

  Questions to answer:

  * Perhaps it can reuse systemd or sudo or pam mechanisms?
  * If not, what can we copy/pass-through? e.g. TERM needs to be kept the same.
  * What to do about hooks
  * umask(022) before executing dpkg (anything?), also need correct umask for 
lists for sure.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1996177/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to