[Bug 1029046] Re: include system state from apt-clone in apport package hook

[Steve Langasek]

Hello Brian, or anyone else affected,

Accepted update-manager into precise-proposed. The package will build
now and be available at http://launchpad.net/ubuntu/+source/update-
manager/1:0.156.14.7 in a few hours, and then in the -proposed
repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please change the bug tag from
verification-needed to verification-done.  If it does not, change the
tag to verification-failed.  In either case, details of your testing
will help us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Changed in: update-manager (Ubuntu Precise)
       Status: In Progress => Fix Committed

** Tags added: verification-needed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1029046

Title:
  include system state from apt-clone in apport package hook

Status in “update-manager” package in Ubuntu:
  Won't Fix
Status in “update-manager” source package in Precise:
  Fix Committed

Bug description:
  As documented in bug 954483 and bug 1004503 update-manager was
  attaching apt-clone system state information which included usernames
  and passwords from apt sources files.  apt-clone has been modified to
  scrub the sources files (bug 1029021) before creating them and update-
  manager should be updated to take advantage of this and start
  including apt system state information again as it is useful in
  debugging distribution upgrades.

  [Impact]
  update-manager is not currently include apt clone system state information when creating apport reports for sending to Launchpad.  This information is essential for debugging distribution upgrades and should be included.

  [Test Case]
  0) Install apt-clone version 0.2.2ubuntu1 as this includes necessary functionality
  1) Create a file /etc/apt/sources.list.d/my-ppa.list with a line like so:
  'deb http://bdmurray:g000dpassw0rd@ppa.launchpad.net/bdmurray/hda/ubuntu precise main'
  2) Edit /etc/default/grub so that you have a line missing a final quote:
  GRUB_CMDLINE_LINUX_DEFAULT="quiet splash
  3) start a distribution upgrade from precise to quantal
  4) there should now be a file in /var/log/dist-upgrade named apt-clone_system_state.tar.gz; copy this to /tmp/ and tar xfvz it
  5) look for bdmurray and g00dpassw0rd in the extracted version of my-ppa.list

  With the version of update-manager from -proposed my-ppa.list should
  contain USERNAME:PASSWORD instead of my nick and password.

  [Regression Potential]
  It is possible that usernames and passwords will appear in apt-clone_system_state.tar.gz but test case in this bug report is pretty solid.  Additionally this same code has been in quantal since early July.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1029046/+subscriptions