dx-packages team mailing list archive

[Gunnar Hjalmarsson <1974250@xxxxxxxxxxxxxxxxxx>]

On 2022-05-20 16:54, Marc Deslauriers wrote:
> Or remove those scripts from Debian completely...looks like they
> were added because of https://bugs.debian.org/cgi- 
> bin/bugreport.cgi?bug=756259 , but muon doesn't seem to use them
> anymore...

FTR I removed 0009-language-tools.patch from Debian.

https://salsa.debian.org/freedesktop-
team/accountsservice/-/commit/294910b8

Let's see if somebody complains.. Hopefully not.

-- 
You received this bug notification because you are a member of DX
Packages, which is subscribed to accountsservice in Ubuntu.
Matching subscriptions: dx-packages
https://bugs.launchpad.net/bugs/1974250

Title:
  ~/.pam_environment gets created as owned by root

Status in accountsservice package in Ubuntu:
  Fix Released
Status in accountsservice source package in Jammy:
  Fix Released
Status in accountsservice source package in Kinetic:
  Fix Released

Bug description:
  Something has happened lately with accountsservice, which makes it act
  as root instead of the current user when creating ~/.pam_environment.
  The very old bug #904395 comes to mind, and this smells a security
  issue.

  The function which is supposed to prevent this behavior is here:

  https://salsa.debian.org/freedesktop-
  team/accountsservice/-/blob/ubuntu/debian/patches/0010-set-
  language.patch#L75

  Haven't investigated further yet.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/1974250/+subscriptions