[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#583533: marked as done (live-initramfs: policykit grants all permissions even with nosudo)

Your message dated Thu, 15 Jul 2010 17:19:30 +0000
with message-id <E1OZS5q-000498-V5@franck.debian.org>
and subject line Bug#583533: fixed in live-config 2.0~a3-1
has caused the Debian Bug report #583533,
regarding live-initramfs: policykit grants all permissions even with nosudo
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
583533: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583533
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: live-initramfs
Version: 1.236.2-1
Tags: patch

When booting with nosudo, you can still do virtually anything you want
on the system, because PolicyKit will grant all permissions to the live
user.

Attached patch fixes the bug.

Cheers,
-- 
 .''`.      Josselin Mouette
: :' :
`. `'   “A handshake with whitnesses is the same
  `-     as a signed contact.”  -- Jörg Schilling

--- /tmp/pouet2/usr/share/initramfs-tools/scripts/live-bottom/44pk_allow	2010-05-18 06:53:40.000000000 +0200
+++ 44pk_allow	2010-05-27 23:05:27.000000000 +0200
@@ -22,6 +22,9 @@
 
 . /scripts/live-functions
 
+if [ -z "${NOSUDO}" ]
+then
+
 log_begin_msg "Grant administrative PolicyKit pivilieges to default user"
 
 # live-initramfs script
@@ -69,3 +72,5 @@
 EOF
 
 log_end_msg
+
+fi

--- End Message ---
--- Begin Message --- 
Source: live-config
Source-Version: 2.0~a3-1

We believe that the bug you reported is fixed in the latest version of
live-config, which is due to be installed in the Debian FTP archive:

live-config-sysvinit_2.0~a3-1_all.deb
  to main/l/live-config/live-config-sysvinit_2.0~a3-1_all.deb
live-config_2.0~a3-1.diff.gz
  to main/l/live-config/live-config_2.0~a3-1.diff.gz
live-config_2.0~a3-1.dsc
  to main/l/live-config/live-config_2.0~a3-1.dsc
live-config_2.0~a3-1_all.deb
  to main/l/live-config/live-config_2.0~a3-1_all.deb
live-config_2.0~a3.orig.tar.gz
  to main/l/live-config/live-config_2.0~a3.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 583533@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Daniel Baumann <daniel@debian.org> (supplier of updated live-config package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sun, 30 May 2010 09:35:32 +0200
Source: live-config
Binary: live-config live-config-sysvinit
Architecture: source all
Version: 2.0~a3-1
Distribution: unstable
Urgency: low
Maintainer: Debian Live Project <debian-live@lists.debian.org>
Changed-By: Daniel Baumann <daniel@debian.org>
Description: 
 live-config - Debian Live - System Configuration Scripts
 live-config-sysvinit - Debian Live - System Configuration Scripts (sysvinit backend)
Closes: 583533
Changes: 
 live-config (2.0~a3-1) unstable; urgency=low
 .
   * Removing fixme note about configuration filename.
   * Adding note about a logfile to todo.
   * Adding reference to locales script in manpages.
   * Adding live-noconfig option to exclude specific scripts from being
     run (Closes: #583533).
   * Reordering parameters to match ordering of scripts.
   * Allow to use live-noconfig for excluding scripts without the need of
     specifying live-config too.
   * Updating German manpage translation.
   * Using UTF-8 and umlauts in German manpage translation.
   * Adding shortcut parameter to disable root privileges, no matter what
     mechanism would be used.
   * Replacing reference to live-initramfs with live-boot in manpage.
   * Setting default user fullname to 'Debian Live user'.
   * Adding wget to suggests.
   * Adding script options in manpages.
   * Improving wording in boot parameter (scripts) section of manpage.
   * Improving German manpages translation.
Checksums-Sha1: 
 19973d20517ca8888ec75020380f873a17d6038c 1234 live-config_2.0~a3-1.dsc
 914c900a432b7d7de9dfa71161f8b0c876a5cad8 29384 live-config_2.0~a3.orig.tar.gz
 710e2dc3c5d71f63fb9f8d7c001cc9cf3b1a2665 2384 live-config_2.0~a3-1.diff.gz
 1de519b960b24a903b5b5221381fb8a66f0da3e7 17172 live-config_2.0~a3-1_all.deb
 0fc5079290a9d2eee0b27a17a4c79b023cb7f234 2988 live-config-sysvinit_2.0~a3-1_all.deb
Checksums-Sha256: 
 e9edbde18bea22795eff84639470c2b8979f2ceb058021aa15b512e7e1160dbf 1234 live-config_2.0~a3-1.dsc
 da08d90ca7b3d8641cbf4da4d8c779d83d7b417a3c3942906a14b802c7383d71 29384 live-config_2.0~a3.orig.tar.gz
 28a4b8f991ffa69e5b031004bd7168d3c3f9e47e11668db120edb121f17c5e06 2384 live-config_2.0~a3-1.diff.gz
 cda59b30987950b6f64654ef4df257976a00e12a7515ef6cc5e58632ebdc96d4 17172 live-config_2.0~a3-1_all.deb
 9e8a354c2597d4a533cae2f1532b625ecac7010ef93d314400adfe8f5b482008 2988 live-config-sysvinit_2.0~a3-1_all.deb
Files: 
 279e30d6052fd7aa4bcfdef363a20883 1234 misc optional live-config_2.0~a3-1.dsc
 31a1dfcaa80da837a6034a2215ec7b24 29384 misc optional live-config_2.0~a3.orig.tar.gz
 7c5962e3c9def4e4689795fd39ac4cfc 2384 misc optional live-config_2.0~a3-1.diff.gz
 baf71ebe638ecef6ee8299919ddde695 17172 misc optional live-config_2.0~a3-1_all.deb
 29eba5f7d0b7d9fbd75150bcbf9aabb7 2988 misc optional live-config-sysvinit_2.0~a3-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkwCFfUACgkQ+C5cwEsrK56s+ACeMNgjHyG6MzwLq2kwlcMBrccM
9+IAn0mq7esVq/1U8Jpv9SUl3EI/q7Sv
=HOx/
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: