[Bug 1609940] [NEW] aptitude 0.7.4-2ubuntu2 outputs permission warning when asked to display a changelog ("C")

[Joe Philipps]

Public bug reported:

After selecting all available updates (key "U"), on the confirmation
screen (key "g"), after highlighting a package (up/down arrow keys) and
asking for the changelog (key "C"), the changelog is downloaded and
displayed, except a red background warning is shown that after dropping
privileges (changing to user _apt) the program encountered a Permission
denied error.  Logging in on another virtual console and listing /tmp
shows that the directory aptitude<random> is owned by root, group root,
with "rwx" for the owner and no other mode bits set.  Ergo when a
process sets its UID to the one for _apt (118), no operations will be
possible inside that directory.

** Affects: aptitude (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: i386 xenial

** Attachment added: "output of apport-cli -f -p aptitude --save bug.apport"
   https://bugs.launchpad.net/bugs/1609940/+attachment/4714240/+files/bug.apport

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to aptitude in Ubuntu.
https://bugs.launchpad.net/bugs/1609940

Title:
  aptitude 0.7.4-2ubuntu2 outputs permission warning when asked to
  display a changelog ("C")

Status in aptitude package in Ubuntu:
  New

Bug description:
  After selecting all available updates (key "U"), on the confirmation
  screen (key "g"), after highlighting a package (up/down arrow keys)
  and asking for the changelog (key "C"), the changelog is downloaded
  and displayed, except a red background warning is shown that after
  dropping privileges (changing to user _apt) the program encountered a
  Permission denied error.  Logging in on another virtual console and
  listing /tmp shows that the directory aptitude<random> is owned by
  root, group root, with "rwx" for the owner and no other mode bits set.
  Ergo when a process sets its UID to the one for _apt (118), no
  operations will be possible inside that directory.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/aptitude/+bug/1609940/+subscriptions