[Bug 1522675] Re: Warning messages about unsandboxed downloads

[Scott Cowles Jacobs]

I am using Lubuntu 17.04, and when using Synaptic, I get the
"...unsandboxed..." message after a completed download.  One message per
download.  (Why only one?  The package I just downloaded for testing
purposes pulled in six or eight other packages, but only the last was
shown in the message.)

The message occurs in an error window: a large triangle with an exclamation markis shown, with the large text "An error occurred", then (smaller) "The following details are provided:"
So to the user, it does not LOOK like a one-line minor warning...
Synaptic does not refresh the package listing until after dismissing the window.


I now provide 3 examples of the detail provided:

W: Download is performed unsandboxed as root as file
'/var/cache/apt/archives/partial/libreoffice-style-
galaxy_1%3a5.3.1-0ubuntu2_all.deb' couldn't be accessed by user '_apt'.
- pkgAcquire::Run (13: Permission denied)

W: Download is performed unsandboxed as root as file
'/var/cache/apt/archives/partial/gstreamer1.0-pulseaudio_1.10.4-1ubuntu1_amd64.deb'
couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission
denied)

W: Download is performed unsandboxed as root as file
'/var/cache/apt/archives/partial/speedtest-cli_1.0.0-1_all.deb' couldn't
be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)


/var/cache/apt/archives/partial   and
/var/lib/update-notifier/package-data-downloads/partial
both have Owner (Create and delete files) and Group (Access files) owned by Root.

/etc/passwd contains a line:
_apt:x:105:65534::/nonexistent:/bin/false
...so the user does exist, but is not assigned to the two directories

comment #43 says that apparently I should do a:
sudo chown _apt <...each of the two above directories...>

Should I?

How/when are these directories created in the first place?

Surely whatever created them should have set them up with _apt as
owner...?

I don't think I have received this message from update-notifier, but am
not sure...

--------------------------------------------------
scott at scott-ASUS-M2N68-AMPLUS:~$ uname -a
Linux scott-ASUS-M2N68-AMPLUS 4.10.0-21-generic #23-Ubuntu SMP Fri Apr 28 16:14:22 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
scott at scott-ASUS-M2N68-AMPLUS:~$ lsb_release -dsc
Ubuntu 17.04
zesty
scott at scott-ASUS-M2N68-AMPLUS:~$ echo $DESKTOP_SESSION
Lubuntu

scott at scott-ASUS-M2N68-AMPLUS:~$ apt --version
apt 1.4 (amd64)

Synaptic        version  0.84.2
update-notifier version  3.179

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1522675

Title:
  Warning messages about unsandboxed downloads

Status in apt package in Ubuntu:
  Fix Released
Status in update-notifier package in Ubuntu:
  Confirmed
Status in apt package in Debian:
  Fix Released
Status in synaptic package in Debian:
  New

Bug description:
  Recently we got new versions for synaptic 0.82+build1 & apt 1.1.3, but
  now get that error when installing/upgrading some packages:

  Setting up libc6-dbg:amd64 (2.21-0ubuntu5) ...
  Processing triggers for libc-bin (2.21-0ubuntu5) ...
  W: Can't drop privileges for downloading as file '/root/.synaptic/tmp//tmp_cl' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)

  From nautilus, i'm seeing a /root/ folder locked (x on its icon) and
  the folder is empty (no /.synaptic/ sub-folder or file), so the above
  error.

  oem at u64:~$ ls -l .synaptic
  total 4
  -rw-rw-r-- 1 oem oem   0 Aug 25 11:19 options
  -rw-rw-r-- 1 oem oem 236 Aug 25 11:19 synaptic.conf

  oem at u64:~$ ls -l /var/lib/apt/lists/
  ....
  -rw-r----- 1 root root        0 Sep 20 06:36 lock
  drwx------ 2 _apt root    16384 Sep 24 15:25 partial
  ......

  oem at u64:~$ sudo ls -l /var/lib/update-notifier/package-data-downloads/
  .....
  drwxr-xr-x 2 _apt root 4096 Sep 22 23:33 partial

  
  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: synaptic 0.82+build1
  ProcVersionSignature: Ubuntu 4.3.0-1.10-generic 4.3.0
  Uname: Linux 4.3.0-1-generic x86_64
  NonfreeKernelModules: nvidia
  ApportVersion: 2.19.2-0ubuntu8
  Architecture: amd64
  CurrentDesktop: GNOME
  Date: Fri Dec  4 05:23:25 2015
  SourcePackage: synaptic
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1522675/+subscriptions