On Mon, 24 Feb 2014 10:27:38 +0100 Damien Clauzel wrote:

> 2014-02-24 0:26 GMT+01:00 Francesco Poli <invernom...@paranoici.org>:
> 
> Did you by chance modify /etc/apt/apt.conf.d/10apt-listbugs ?
> > Could you please paste its content in your reply?
> 
> 
> That is what I have been thinking. We didn't change the config of
> apt-listbugs, but we have several several scripts that are called by apt's
> hooks. Some of them do things in /tmp, and indeed there is a "cd /tmp" at
> some point.
> 
> I made a try after disabling them, and the warning didn't appear. So yes,
> that was the reason.

Good, finally we figured out what was going on, then!   :-)

I recommend that you modify the script so that it does the equivalent
of:

  MYDIR=`pwd`
  cd /tmp
  # ... do stuff ...
  cd $MYDIR

But anyway, I also recommend that you drop "." from your PATHs.
This would also have other security-related benefits, as previously
mentioned...


Bye.


-- 
 http://www.inventati.org/frx/frx-gpg-key-transition-2010.txt
 New GnuPG key, see the transition document!
..................................................... Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE

Attachment: pgp_3D7BaeliO.pgp
Description: PGP signature

Reply via email to