How to pick up crash reports owned by system users?

[Kees Cook]

On Tue, Jan 09, 2007 at 09:35:11AM +0100, Martin Pitt wrote:
>  * Change apport-checkreports to check for the existence of system
>    crash reports if the user is in 'admin', and have apport-gtk gksu
>    itself if there is a system crash report it cannot read. This would
>    be the safe option, but requires some ugly hardcoding of group
>    names and semantics into apport. However, this hardcoding could
>    eventually be moved into the update-notifier apport code (when
>    we'll finally get event-notifier, this will be much cleaner).

I like this method better as well.  As long as apport-gtk drops privs 
right after reading the report, I think this is safe.

For the use-case of using apport-retrace, is the assumption that the 
user is already savy and is dealing with the perms manually?

-- 
Kees Cook
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : https://lists.ubuntu.com/archives/ubuntu-devel/attachments/20070109/b88e0a21/attachment.pgp