How to pick up crash reports owned by system users?
martin.pitt at ubuntu.com
Wed Jan 10 06:51:56 GMT 2007
Kees Cook [2007-01-09 9:25 -0800]:
> On Tue, Jan 09, 2007 at 09:35:11AM +0100, Martin Pitt wrote:
> > * Change apport-checkreports to check for the existence of system
> > crash reports if the user is in 'admin', and have apport-gtk gksu
> > itself if there is a system crash report it cannot read. This would
> > be the safe option, but requires some ugly hardcoding of group
> > names and semantics into apport. However, this hardcoding could
> > eventually be moved into the update-notifier apport code (when
> > we'll finally get event-notifier, this will be much cleaner).
> I like this method better as well. As long as apport-gtk drops privs
> right after reading the report, I think this is safe.
That's what I was going to do, yes.
> For the use-case of using apport-retrace, is the assumption that the
> user is already savy and is dealing with the perms manually?
Definitively yes. apport-retrace is a tool that is meant for
developers, and the standard use case is to apply it on a report you
downloaded from Malone. Of course it can also be directly applied to
/var/crash/, but then you'll just get the permission error message.
This tool does not have any GUI anyway.
Martin Pitt http://www.piware.de
Ubuntu Developer http://www.ubuntu.com
Debian Developer http://www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: Digital signature
Url : https://lists.ubuntu.com/archives/ubuntu-devel/attachments/20070110/ba056b73/attachment-0001.pgp
More information about the ubuntu-devel