| 2016-06-14 13:12:28 |
Jamie Strandboge |
bug |
|
|
added bug |
| 2016-06-14 13:12:39 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Yakkety |
|
| 2016-06-14 13:12:39 |
Jamie Strandboge |
bug task added |
|
ubuntu-core-launcher (Ubuntu Yakkety) |
|
| 2016-06-14 13:12:39 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Xenial |
|
| 2016-06-14 13:12:39 |
Jamie Strandboge |
bug task added |
|
ubuntu-core-launcher (Ubuntu Xenial) |
|
| 2016-06-14 13:12:51 |
Jamie Strandboge |
ubuntu-core-launcher (Ubuntu Xenial): status |
New |
Triaged |
|
| 2016-06-14 13:12:54 |
Jamie Strandboge |
ubuntu-core-launcher (Ubuntu Yakkety): status |
New |
Triaged |
|
| 2016-06-14 13:12:57 |
Jamie Strandboge |
ubuntu-core-launcher (Ubuntu Yakkety): importance |
Undecided |
Medium |
|
| 2016-06-14 13:12:59 |
Jamie Strandboge |
ubuntu-core-launcher (Ubuntu Xenial): importance |
Undecided |
Medium |
|
| 2016-06-14 13:13:01 |
Jamie Strandboge |
ubuntu-core-launcher (Ubuntu Yakkety): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2016-06-14 13:14:05 |
Jamie Strandboge |
summary |
private mount doesn't work when launching applications from /tmp |
private mount doesn't work when launching applications from within /tmp |
|
| 2016-06-14 13:35:11 |
John Lenton |
description |
Thanks to John Lenton for finding this.
$ cd /tmp
$ mkdir foo
$ hello-world.sh # from snap install hello-world
bash-4.3$ touch foo/bar
bash-4.3$ exit
$ ls /tmp/foo/
bar
We consider this a bug and not a security vulnerability because it is not attacker controlled. |
Thanks to Christian Ehrhardt (paelzer) for finding it, and John Lenton (chipaca) for boiling it down into a digestible mulch.
$ cd /tmp
$ mkdir foo
$ hello-world.sh # from snap install hello-world
bash-4.3$ touch foo/bar
bash-4.3$ exit
$ ls /tmp/foo/
bar
We consider this a bug and not a security vulnerability because it is not attacker controlled. |
|
| 2016-06-15 07:44:45 |
Jamie Strandboge |
ubuntu-core-launcher (Ubuntu Yakkety): status |
Triaged |
In Progress |
|
| 2016-06-28 15:50:36 |
Zygmunt Krynicki |
bug task added |
|
snap-confine |
|
| 2016-06-28 15:51:41 |
Zygmunt Krynicki |
snap-confine: status |
New |
Fix Released |
|
