[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#856638: apt: "apt-get update" downloads of '/var/lib/apt/lists/partial/*_debian_dists_testing_InRelease' unsandboxed



Hi,

On Fri, Mar 03, 2017 at 09:13:13AM +0100, Matteo Fabbroni wrote:
> when running "apt-get update", I always end with this *warning* (not error, but it's annoying):
[…]
> W: Download is performed unsandboxed as root as file '/var/lib/apt/lists/partial/freedom.dicea.unifi.it_debian_dists_testing_InRelease' \ 
> couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permession denied)
[…]
> Here is the content of my /var/cache/apt/lists: is there anything wrong with permissions?
[…]
> 09:08:18 matteo@shaula ~ $ sudo ls -la /var/lib/apt/lists/
> totale 749468
> drwxr-x--- 3 root root    20480 mar  3 08:20 .
> drwxr-x--- 5 root root     4096 mar  3 08:29 ..
[…]
> drwx------ 2 _apt root    61440 mar  3 09:02 partial


The permissions on partial/ are okay, but the permissions of
/var/lib/apt and /var/lib/apt/lists seem odd missing world read & search
permissions each. I guess you aren't using apt often as a non-root user
or you might have noticed other strange symptoms.

Whats your 'umask'? (Just type umask in a terminal where you are logged
in as root – as your user might have a different one)? I guess it is
027? Or perhaps was this your umask at some point?

In case these directories are missing (they shouldn't, but it happens)
apt should be creating them with the permissions set of 755, so perhaps
you "helpfully" created them by hand (or something else did it for you)
ending up with the wrong permissions?


Not sure apt can really do anything about this… we could auto-fixup
permissions perhaps, but that feels rather strange to do given that
there might be a deliberate choice of the user involved (for reasons as
of yet unknown) and a (different) warning would both be annoying (for
the deliberate choice user) as well as not really helpful for the
unsuspecting user… but perhaps no by-choice user exist… mhhh.


Best regards

David Kalnischkies

Attachment: signature.asc
Description: PGP signature


Reply to: