On Sun, 11 Mar 2012 16:48:40 +0100 Francesco Poli wrote:

> On Sun, 11 Mar 2012 16:02:13 +0100 Gian Piero Carrubba wrote:
> 
> > * [Sun, Mar 11, 2012 at 12:47:58AM +0100] Francesco Poli:
[...]
> > >At this point, I hope that a radical solution may be found to fix both
> > >this bug (#662865) and the other one (#662983).
> > 
> > ... I agree that a more generic and possibly radical fix has to be 
> > found.
> 
> Yeah, I really hope that a good solution may be found.

Since the radical fix is taking longer than I was hoping, I think that
I should at least try to work around this issue.

Currently, if apt-listbugs finds out that it was (directly or
indirectly) invoked through sudo, it attempts to run the browser as the
regular user that gained root privileges via sudo.
To this aim, apt-listbugs invokes the browser through
su $SUDO_USER -c "browsercommand < /dev/tty".
Unfortunately, this fails with su from package login/1:4.1.5-1, since
browsercommand is prevented from opening /dev/tty, as previously
explained...

For the time being, the only way to dodge this problem is maybe to
avoid invoking "su -c", even when in an sudo environment.
This means that the browser will run as root, even when apt-listbugs is
invoked through sudo.

I acknowledge that this fix is sub-optimal, since a user calling sudo
may want to see his/her own favorite browser invoked by apt-listbugs as
regular user, but I am afraid that I cannot implement a better
solution, unless/until APT protocols are changed (see
http://bugs.debian.org/662983#45 )

What do you think about this proposal?
Would you consider it as an acceptable interim fix, while waiting for
the radical solution?

Please let me know.


-- 
 http://www.inventati.org/frx/frx-gpg-key-transition-2010.txt
 New GnuPG key, see the transition document!
..................................................... Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE

Attachment: pgpuWHuNXOMSY.pgp
Description: PGP signature

Reply via email to