[Bug 1029046] Re: include system state from apt-clone in apport package hook

[Jean-Baptiste Lallement]

SRU verification for Precise:
I have reproduced the problem with update-manager 1:0.156.14.6 in precise-updates and have verified that the version of update-manager 1:0.156.14.9 in -proposed fixes the issue.

Marking as verification-done


** Tags removed: verification-needed
** Tags added: verification-done

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1029046

Title:
  include system state from apt-clone in apport package hook

Status in “update-manager” package in Ubuntu:
  Won't Fix
Status in “update-manager” source package in Precise:
  Fix Committed

Bug description:
  As documented in bug 954483 and bug 1004503 update-manager was
  attaching apt-clone system state information which included usernames
  and passwords from apt sources files.  apt-clone has been modified to
  scrub the sources files (bug 1029021) before creating them and update-
  manager should be updated to take advantage of this and start
  including apt system state information again as it is useful in
  debugging distribution upgrades.

  [Impact]
  update-manager is not currently include apt clone system state information when creating apport reports for sending to Launchpad.  This information is essential for debugging distribution upgrades and should be included.

  [Test Case]
  0) Install apt-clone version 0.2.2ubuntu1 as this includes necessary functionality
  1) Create a file /etc/apt/sources.list.d/my-ppa.list with a line like so:
  'deb http://bdmurray:g000dpassw0rd@ppa.launchpad.net/bdmurray/hda/ubuntu precise main'
  2) Edit /etc/default/grub so that you have a line missing a final quote:
  GRUB_CMDLINE_LINUX_DEFAULT="quiet splash
  3) start a distribution upgrade from Oneiric to Precise
  4) there should now be a file in /var/log/dist-upgrade named apt-clone_system_state.tar.gz; copy this to /tmp/ and tar xfvz it
  5) look for bdmurray and g00dpassw0rd in the extracted version of my-ppa.list

  With the version of update-manager from -proposed my-ppa.list should
  contain USERNAME:PASSWORD instead of my nick and password.

  [Regression Potential]
  It is possible that usernames and passwords will appear in apt-clone_system_state.tar.gz but test case in this bug report is pretty solid.  Additionally this same code has been in quantal since early July.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1029046/+subscriptions