Public bug reported:

[impact]

each time 'apt update' is run, the cnf db is recreated, and it replaces
the existing cnf db file. This resets its file mode based on the root
umask, since root is the user that runs 'apt update'. If the root umask
has the 'other' value set to 7 (e.g. umask 027), then the cnf db will
not be readable by non-root users, which breaks usage of cnf.

[test case]

set root umask to (e.g.) 027 in /etc/login.defs and run 'sudo apt
update', then check the mode of the cnf db (or try to use cnf as a non-
root user)

[regression potential]

failure to create or update the cnf db, or problems with users using cnf

[scope]

this is needed upstream and in all releases

[other info]

https://salsa.debian.org/jak/command-not-found/-/merge_requests/5

** Affects: command-not-found (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: sts

** Tags added: sts

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1951108

Title:
  cnf db mode gets reset based on root umask each  apt update

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/command-not-found/+bug/1951108/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to