/sys/class/dmi/id/product_uuid is not world readable

Bug #1351519 reported by Dimitri John Ledkov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Whoopsie
New
Undecided
Unassigned
linux (Ubuntu)
Confirmed
Undecided
Unassigned
whoopsie (Ubuntu)
New
Undecided
Unassigned

Bug Description

As part of (un)stable whoopsie persistent machine identifier generation /sys/class/dmi/id/product_uuid is used.

However:
$ ls /sys/class/dmi/id/product_uuid
-r-------- 1 root root 4096 Aug 2 01:23 /sys/class/dmi/id/product_uuid

It's not world-readable. Hence API calls to whoopsie_identifier_generate return different results for root and non-root users.

Either whoopsie should stop using product_uuid, or api calls to whoopsie_identifier_generate should be denied and instead one should use whoopsie-preferences which gets the full uuid (since the service is running as root on system dbus and thus can read product_uuid)

summary: - product_uuid is not world readable
+ /sys/class/dmi/id/product_uuid is not world readable
description: updated
Revision history for this message
Brad Figg (brad-figg) wrote : Missing required logs.

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1351519

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu):
status: New → Incomplete
Changed in linux (Ubuntu):
status: Incomplete → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.