[Bug 1400357] Re: zero file called 0 created in $HOME each time Ubuntu DVD is inserted

[Launchpad Bug Tracker]

This bug was fixed in the package update-notifier - 3.158

---------------
update-notifier (3.158) vivid; urgency=medium

  * debian/update-notifier-cds.conf: use the correct comparison operator for
    checking the type of CD. (LP: #1400357)
 -- Brian Murray <brian at ubuntu.com>   Wed, 10 Dec 2014 12:41:49 -0800

** Changed in: update-notifier (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-notifier in Ubuntu.
https://bugs.launchpad.net/bugs/1400357

Title:
  zero file called 0 created in $HOME each time Ubuntu DVD is inserted

Status in update-notifier package in Ubuntu:
  Fix Released

Bug description:
  I noticed that weird file called 0 (zero), and empty, in my home directory.
  I deleted it and it came back !

  then i used auditd to find out what process was creating such a file, so I used
  auditctl -w /home/zebul666/0 -p wa -k home-zero-file

  and to make it permanent I added the line "-w /home/zebul666/0 -p wa
  -k home-zero-file" in /etc/audit/rules.d/audit.rules

  and wait.

  and I had a hit with ausearch -k home-zeo-file showed me

  time->Sat Nov 22 23:42:41 2014
  type=PROCTITLE msg=audit(1416696161.454:19183): proctitle=2F62696E2F7368002D65002F70726F632F73656C662F66642F39
  type=PATH msg=audit(1416696161.454:19183): item=1 name="0" inode=11535138 dev=fc:01 mode=0100664 ouid=1000 ogid=1000 rdev=00:00 nametype=CREATE
  type=PATH msg=audit(1416696161.454:19183): item=0 name="/home/zebul666" inode=11534337 dev=fc:01 mode=040700 ouid=1000 ogid=1000 rdev=00:00 nametype=PARENT
  type=CWD msg=audit(1416696161.454:19183):  cwd="/home/zebul666"
  type=SYSCALL msg=audit(1416696161.454:19183): arch=c000003e syscall=2 success=yes exit=3 a0=7f0c68b8ab08 a1=241 a2=1b6 a3=0 items=2 ppid=22150 pid=28635 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="sh" exe="/bin/dash" key="home-zero-file"

  the process with pid 28635 was gone but more interestingly I noticed
  that the PPID 22150 is the one for upstart !

  so it's a script launched by upstart
  and I noticed in my /var/log/syslog at the approx. same time

  Nov 22 23:42:30 callisto udisksd[3502]: Mounted /dev/sr0 at
  /media/zebul666/Ubuntu 14.10 amd64 on behalf of uid 1000

  I don't know which script is run by upstart at dvd insertion but there
  is a bug in it that creates a empty zero file in home when you insert
  a ubuntu DVD

  running ubuntu 14.10 amd64

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-notifier/+bug/1400357/+subscriptions