OS Release notes with clickable links displayed as root

Bug #1229616 reported by Stuart Bishop
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
update-manager (Ubuntu)
Triaged
High
Unassigned

Bug Description

[Test Case]
1) On an Ubuntu 13.04 system run update-manager -d in a terminal
2) click "Upgrade..." when asked to upgrade
3) Click the testing url in the release notes dialog
4) run ps and observe the web browser running as root

update-manager displays the release notes before performing an operating system upgrade. The release notes window is running as the root user, and contains clickable links. Clicking on these links attempts to run a web browser as the root user. This fails with Chromium, which just refuses, and is probably considered unhealthy if a less anal web browser is configured as the default.

ProblemType: BugDistroRelease: Ubuntu 13.04
Package: update-manager 1:0.186.2
ProcVersionSignature: Ubuntu 3.8.0-30.44-generic 3.8.13.6
Uname: Linux 3.8.0-30-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.9.2-0ubuntu8.3
Architecture: amd64
Date: Tue Sep 24 16:04:02 2013
EcryptfsInUse: Yes
GsettingsChanges:
 b'com.ubuntu.update-manager' b'first-run' b'false'
 b'com.ubuntu.update-manager' b'launch-time' b'1380013260'
 b'com.ubuntu.update-manager' b'show-details' b'true'
 b'com.ubuntu.update-manager' b'window-height' b'852'
 b'com.ubuntu.update-manager' b'window-width' b'814'
InstallationDate: Installed on 2013-02-26 (210 days ago)
InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Alpha amd64 (20130225)
MarkForUpload: True
PackageArchitecture: allSourcePackage: update-manager
UpgradeStatus: No upgrade log present (probably fresh install)

Related branches

Revision history for this message
Stuart Bishop (stub) wrote :
description: updated
affects: update-manager (Ubuntu) → ubuntu-release-upgrader (Ubuntu)
Changed in ubuntu-release-upgrader (Ubuntu):
importance: Undecided → High
status: New → Triaged
Revision history for this message
Brian Murray (brian-murray) wrote :

Actually this bug exists in update-manager and how it calls do-release-upgrade.

affects: ubuntu-release-upgrader (Ubuntu) → update-manager (Ubuntu)
Changed in update-manager (Ubuntu):
assignee: nobody → Brian Murray (brian-murray)
description: updated
Changed in update-manager (Ubuntu):
status: Triaged → In Progress
Changed in update-manager (Ubuntu):
assignee: Brian Murray (brian-murray) → nobody
status: In Progress → Triaged
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.