[Bug 1174007] Re: release upgrader launches browser as root

[Michael Farrell]

This is still an issue in 17.04.  I've flipped this to being a security
issue so hopefully it will get the attention it deserves.

$ ps aux | grep firefox
root      4497 12.8  1.0 2211388 347188 ?      SNl  10:07   0:03 /usr/lib/firefox/firefox https://wiki.ubuntu.com/ArtfulAardvark/ReleaseNotes


** Information type changed from Public to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ubuntu-release-upgrader in
Ubuntu.
https://bugs.launchpad.net/bugs/1174007

Title:
  release upgrader launches  browser as root

Status in ubuntu-release-upgrader package in Ubuntu:
  Confirmed

Bug description:
  1. I launch Software Updater, then choose "Upgrade..." to initiate the 13.04 upgrade
  2. I am asked fot password
  3. A window with release notes pops up

  PROBLEM:
  4. I click the URL to view release notes
  5. A pop-up window complains "Chromium cannot be run as root." (despite Firefox being my default browser)
  6. Firefox is launched as root

  EXPECTED:
  Software Center should honour my default browser and definitely not run it as root.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.10
  Package: software-center 5.4.1.4
  Uname: Linux 3.9.0-030900rc8-generic x86_64
  ApportVersion: 2.6.1-0ubuntu10
  Architecture: amd64
  Date: Sun Apr 28 18:06:34 2013
  InstallationDate: Installed on 2012-11-02 (176 days ago)
  InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release amd64 (20121017.5)
  MarkForUpload: True
  PackageArchitecture: all
  SourcePackage: software-center
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/1174007/+subscriptions