gnome-session: unable to launch gnome due to bad group/owner on .ICEauthority
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gnome-session (Debian) |
Fix Released
|
Unknown
|
|||
gnome-session (Ubuntu) |
Invalid
|
High
|
Sebastien Bacher |
Bug Description
Automatically imported from Debian bug report #325701 http://
CVE References
Debian Bug Importer (debzilla) wrote : | #1 |
In Debian Bug tracker #325701, Gustavo Noronha Silva (kov) wrote : Re: Bug#325701: gnome-session: unable to launch gnome due to bad group/owner on .ICEauthority | #2 |
Em Ter, 2005-08-30 às 11:38 +0200, Olivier Schwander escreveu:
> ** (gnome-
> file: /home/olivier/
>
> A solution is to change owner/group of the file .ICEauthority from root:root
> to username:username.
>
> I think it is a problem in the preinst script.
preinst scripts are not supposed to mess up with your home directory;
how did that .ICEauthority arrive at your home directory in the first
place?
I bet it is not a problem in gnome-session, but some other thing that
messed up by writing that file there. Any ideas?
See ya,
--
<email address hidden>: Gustavo Noronha <http://
Debian: <http://
In Debian Bug tracker #325701, Josselin Mouette (joss) wrote : | #3 |
Le mardi 30 août 2005 à 08:54 -0300, Gustavo Noronha Silva a écrit :
> Em Ter, 2005-08-30 às 11:38 +0200, Olivier Schwander escreveu:
> > ** (gnome-
> > file: /home/olivier/
> >
> > A solution is to change owner/group of the file .ICEauthority from root:root
> > to username:username.
> >
> > I think it is a problem in the preinst script.
>
> preinst scripts are not supposed to mess up with your home directory;
> how did that .ICEauthority arrive at your home directory in the first
> place?
>
> I bet it is not a problem in gnome-session, but some other thing that
> messed up by writing that file there. Any ideas?
It could be some GNOME program run as root with HOME=/home/olivier.
--
.''`. Josselin Mouette /\./\
: :' : <email address hidden>
`. `' <email address hidden>
`- Debian GNU/Linux -- The power of freedom
In Debian Bug tracker #325701, Olivier Schwander (olivier-schwander) wrote : Re: Bug#325701: gnome-session: unable to launch gnome due to bad group/owner on .ICEauthority | #4 |
Josselin Mouette a écrit :
> Le mardi 30 août 2005 à 08:54 -0300, Gustavo Noronha Silva a écrit :
>
>>Em Ter, 2005-08-30 às 11:38 +0200, Olivier Schwander escreveu:
>>
>>> ** (gnome-
>>>file: /home/olivier/
>>>
>>>A solution is to change owner/group of the file .ICEauthority from root:root
>>>to username:username.
>>>
>>>I think it is a problem in the preinst script.
>>
>>preinst scripts are not supposed to mess up with your home directory;
>>how did that .ICEauthority arrive at your home directory in the first
>>place?
>>
>>I bet it is not a problem in gnome-session, but some other thing that
>>messed up by writing that file there. Any ideas?
>
>
> It could be some GNOME program run as root with HOME=/home/olivier.
The problem appeared after an upgrade of gnome-session and a logout. But
only one user is concerned: an .ICEauthority used by an other user
only with kde has a good owner.
I may have used Synaptic as root but I don't understand how it could
have bad $HOME. I tried with su and gksu but owner is preserved.
I know that I have not forced HOME=/home/olivier.
Sebastien Bacher (seb128) wrote : | #5 |
that's NOTABUG
In Debian Bug tracker #325701, Gustavo Noronha Silva (kov) wrote : Re: Bug#325701: gnome-session: unable to launch gnome due to bad group/owner on .ICEauthority | #6 |
Em Ter, 2005-08-30 às 14:45 +0200, Olivier Schwander escreveu:
> Josselin Mouette a écrit :
> > It could be some GNOME program run as root with HOME=/home/olivier.
>
> The problem appeared after an upgrade of gnome-session and a logout. But
> only one user is concerned: an .ICEauthority used by an other user
> only with kde has a good owner.
> I may have used Synaptic as root but I don't understand how it could
> have bad $HOME. I tried with su and gksu but owner is preserved.
> I know that I have not forced HOME=/home/olivier.
Might be... I created a new user here tro try gksu +
$some_GNOME_
full gnome-session as root using gksu to try it out and make sure.
No .ICEauthority was created at all.
gksu does leave some variables like USERNAME and LOGNAME untouched,
though, so a misbehaving program could be the problem there. I tried
synaptic, though, and it works without creating a .ICEauthority.
Haven't you tried to run something else as root, using other means,
maybe?
See ya,
--
<email address hidden>: Gustavo Noronha <http://
Debian: <http://
In Debian Bug tracker #325701, Olivier Schwander (olivier-schwander) wrote : Re: Bug#325701: gnome-session: unable to launch gnome due to bad group/owner on .ICEauthority | #7 |
Gustavo Noronha Silva a écrit :
> Em Ter, 2005-08-30 às 14:45 +0200, Olivier Schwander escreveu:
>
>>Josselin Mouette a écrit :
>>
>>>It could be some GNOME program run as root with HOME=/home/olivier.
>>
>>The problem appeared after an upgrade of gnome-session and a logout. But
>> only one user is concerned: an .ICEauthority used by an other user
>>only with kde has a good owner.
>>I may have used Synaptic as root but I don't understand how it could
>>have bad $HOME. I tried with su and gksu but owner is preserved.
>>I know that I have not forced HOME=/home/olivier.
>
>
> Might be... I created a new user here tro try gksu +
> $some_GNOME_
> full gnome-session as root using gksu to try it out and make sure.
> No .ICEauthority was created at all.
>
> gksu does leave some variables like USERNAME and LOGNAME untouched,
> though, so a misbehaving program could be the problem there. I tried
> synaptic, though, and it works without creating a .ICEauthority.
>
> Haven't you tried to run something else as root, using other means,
> maybe?
>
> See ya,
>
I tried to launch various gnome programs as root or not but there is no
.ICEauthority file created.
The only way to obtain a .ICEauthority file is at the first launch of a
gnome session. The file has the good owner.
If I delete the file, it is never recreated.
I can't manage to find what program created this file.
In Debian Bug tracker #325701, Loïc Minier (lool) wrote : bug is unreproducible, downgrading | #8 |
severity 325701 important
tag 325701 + unreproducible
thanks
--
Loïc Minier <email address hidden>
Come, your destiny awaits!
Debian Bug Importer (debzilla) wrote : | #9 |
Message-Id: <email address hidden>
Date: Tue, 30 Aug 2005 11:38:51 +0200
From: Olivier Schwander <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: gnome-session: unable to launch gnome due to bad group/owner on .ICEauthority
Package: gnome-session
Version: 2.10.0-6
Severity: grave
Justification: renders package unusable
Hello,
gdm fails to launch gnome.
The logfile .xsession-errors follows:
/etc/
/var/log/wtmp -u /var/run/utmp -x "/var/lib/
"" -l
":0" "olivier"
/etc/
/var/log/wtmp -u /var/run/utmp -x "/var/lib/
"" -l
":0" "olivier"
/etc/
** (gnome-
file: /home/olivier/
A solution is to change owner/group of the file .ICEauthority from root:root
to username:username.
I think it is a problem in the preinst script.
Thanks
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/dash
Kernel: Linux 2.6.12-1-k7
Locale: LANG=fr_FR, LC_CTYPE=fr_FR (charmap=
Versions of packages gnome-session depends on:
ii desktop-base 0.3.15 common files for the Debian Deskto
ii gconf2 2.10.1-1 GNOME configuration database syste
ii gnome-control-
ii libatk1.0-0 1.10.1-2 The ATK accessibility toolkit
ii libbonobo2-0 2.10.0-1 Bonobo CORBA interfaces library
ii libc6 2.3.5-5 GNU C Library: Shared libraries an
ii libesd0 0.2.36-1 Enlightened Sound Daemon - Shared
ii libgconf2-4 2.10.1-1 GNOME configuration database syste
ii libglib2.0-0 2.8.0-1 The GLib library of C routines
ii libgnome2-0 2.10.1-1 The GNOME 2 library - runtime file
ii libgnomeui-0 2.10.1-1 The GNOME 2 libraries (User Interf
ii libgtk2.0-0 2.6.9-1 The GTK+ graphical user interface
ii libice6 6.8.2.dfsg.1-5 Inter-Client Exchange library
ii liborbit2 1:2.12.2-3 libraries for ORBit2 - a CORBA ORB
ii libpango1.0-0 1.8.2-1 Layout and rendering of internatio
ii libsm6 6.8.2.dfsg.1-5 X Window System Session Management
ii libx11-6 6.8.2.dfsg.1-5 X Window System protocol client li
ii libxmu6 6.8.2.dfsg.1-5 X Window System miscellaneous util
ii libxrandr2 6.8.2.dfsg.1-5 X Window System Resize, Rotate and
ii libxt6 6.8.2.dfsg.1-5 X Toolkit Intrinsics
ii xlibs ...
Debian Bug Importer (debzilla) wrote : | #10 |
Message-Id: <email address hidden>
Date: Tue, 30 Aug 2005 08:54:30 -0300
From: Gustavo Noronha Silva <email address hidden>
To: <email address hidden>, Olivier Schwander <email address hidden>
Subject: Re: Bug#325701: gnome-session: unable to launch gnome due to bad
group/owner on .ICEauthority
--=-NbXKj+
Content-Type: text/plain; charset=UTF-8
Content-
Em Ter, 2005-08-30 =C3=A0s 11:38 +0200, Olivier Schwander escreveu:
> ** (gnome-
ty
> file: /home/olivier/
>=20
> A solution is to change owner/group of the file .ICEauthority from root:r=
oot
> to username:username.
>=20
> I think it is a problem in the preinst script.
preinst scripts are not supposed to mess up with your home directory;
how did that .ICEauthority arrive at your home directory in the first
place?
I bet it is not a problem in gnome-session, but some other thing that
messed up by writing that file there. Any ideas?
See ya,
--=20
<email address hidden>: Gustavo Noronha <http://
Debian: <http://
--=-NbXKj+
Content-Type: application/
Content-
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iQIVAwUAQxRI9BD
JrSqlrXotpct/
fksLeelumrsLeHd
AWtMkm/
MLvTfv4EvnVCCRn
6D7bK7lO3f+
gX0UG4d9Lnx0w67
Bbbq1+btkDwt0j9
rY3NcTzUttlJF1l
rzJFaeA/
1SBrKuem1PMIXCr
tzFU0GD5o5E=
=IWuA
-----END PGP SIGNATURE-----
--=-NbXKj+
Debian Bug Importer (debzilla) wrote : | #11 |
Message-Id: <email address hidden>
Date: Tue, 30 Aug 2005 14:15:44 +0200
From: Josselin Mouette <email address hidden>
To: <email address hidden>
Cc: Olivier Schwander <email address hidden>
Subject: Re: Bug#325701: gnome-session: unable to launch gnome due to bad
group/owner on .ICEauthority
Le mardi 30 ao=FBt 2005 =E0 08:54 -0300, Gustavo Noronha Silva a =E9crit :
> Em Ter, 2005-08-30 =E0s 11:38 +0200, Olivier Schwander escreveu:
> > ** (gnome-
rity
> > file: /home/olivier/
> >=20
> > A solution is to change owner/group of the file .ICEauthority from root=
:root
> > to username:username.
> >=20
> > I think it is a problem in the preinst script.
>=20
> preinst scripts are not supposed to mess up with your home directory;
> how did that .ICEauthority arrive at your home directory in the first
> place?
>=20
> I bet it is not a problem in gnome-session, but some other thing that
> messed up by writing that file there. Any ideas?
It could be some GNOME program run as root with HOME=3D/
--=20
.''`. Josselin Mouette /\./\
: :' : <email address hidden>
`. `' <email address hidden>
`- Debian GNU/Linux -- The power of freedom
Debian Bug Importer (debzilla) wrote : | #12 |
Message-ID: <email address hidden>
Date: Tue, 30 Aug 2005 14:45:46 +0200
From: Olivier Schwander <email address hidden>
To: <email address hidden>
Subject: Re: Bug#325701: gnome-session: unable to launch gnome due to bad
group/owner on .ICEauthority
Josselin Mouette a =E9crit :
> Le mardi 30 ao=FBt 2005 =E0 08:54 -0300, Gustavo Noronha Silva a =E9cri=
t :
>=20
>>Em Ter, 2005-08-30 =E0s 11:38 +0200, Olivier Schwander escreveu:
>>
>>> ** (gnome-
ority
>>>file: /home/olivier/
>>>
>>>A solution is to change owner/group of the file .ICEauthority from roo=
t:root
>>>to username:username.
>>>
>>>I think it is a problem in the preinst script.
>>
>>preinst scripts are not supposed to mess up with your home directory;
>>how did that .ICEauthority arrive at your home directory in the first
>>place?
>>
>>I bet it is not a problem in gnome-session, but some other thing that
>>messed up by writing that file there. Any ideas?
>=20
>=20
> It could be some GNOME program run as root with HOME=3D/
The problem appeared after an upgrade of gnome-session and a logout. But
only one user is concerned: an .ICEauthority used by an other user
only with kde has a good owner.
I may have used Synaptic as root but I don't understand how it could
have bad $HOME. I tried with su and gksu but owner is preserved.
I know that I have not forced HOME=3D/
Debian Bug Importer (debzilla) wrote : | #13 |
Message-Id: <email address hidden>
Date: Tue, 30 Aug 2005 11:54:34 -0300
From: Gustavo Noronha Silva <email address hidden>
To: <email address hidden>, Olivier Schwander <email address hidden>
Subject: Re: Bug#325701: gnome-session: unable to launch gnome due to bad
group/owner on .ICEauthority
--=-LrBrBCLbIFL
Content-Type: text/plain; charset=UTF-8
Content-
Em Ter, 2005-08-30 =C3=A0s 14:45 +0200, Olivier Schwander escreveu:
> Josselin Mouette a =C3=A9crit :
> > It could be some GNOME program run as root with HOME=3D/
>=20
> The problem appeared after an upgrade of gnome-session and a logout. But
> only one user is concerned: an .ICEauthority used by an other user
> only with kde has a good owner.
> I may have used Synaptic as root but I don't understand how it could
> have bad $HOME. I tried with su and gksu but owner is preserved.
> I know that I have not forced HOME=3D/
Might be... I created a new user here tro try gksu +
$some_GNOME_
full gnome-session as root using gksu to try it out and make sure.
No .ICEauthority was created at all.
gksu does leave some variables like USERNAME and LOGNAME untouched,
though, so a misbehaving program could be the problem there. I tried
synaptic, though, and it works without creating a .ICEauthority.
Haven't you tried to run something else as root, using other means,
maybe?
See ya,
--=20
<email address hidden>: Gustavo Noronha <http://
Debian: <http://
--=-LrBrBCLbIFL
Content-Type: application/
Content-
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iQIVAwUAQxRzKBD
4CJihxTUQZM2gY4
769pwe+
6m2a7+65JmQlW5z
P3+F1/J7N8e7zkL
3uRPxqA4sLVuKNV
f7Kbk6Gvcmu2s0v
40URnWUuHSFeU7P
FOtjiVU9UuLHjw1
5qnQ99PHdxE/
sFyejynyI/
n0+L7F4peog=
=H6tD
-----END PGP SIGNATURE-----
--=-LrBrBCLbIFL
Debian Bug Importer (debzilla) wrote : | #14 |
Message-ID: <email address hidden>
Date: Tue, 30 Aug 2005 19:07:59 +0200
From: Olivier Schwander <email address hidden>
To: <email address hidden>
Subject: Re: Bug#325701: gnome-session: unable to launch gnome due to bad
group/owner on .ICEauthority
Gustavo Noronha Silva a =C3=A9crit :
> Em Ter, 2005-08-30 =C3=A0s 14:45 +0200, Olivier Schwander escreveu:
>=20
>>Josselin Mouette a =C3=A9crit :
>>
>>>It could be some GNOME program run as root with HOME=3D/
>>
>>The problem appeared after an upgrade of gnome-session and a logout. Bu=
t
>> only one user is concerned: an .ICEauthority used by an other user
>>only with kde has a good owner.
>>I may have used Synaptic as root but I don't understand how it could
>>have bad $HOME. I tried with su and gksu but owner is preserved.
>>I know that I have not forced HOME=3D/
>=20
>=20
> Might be... I created a new user here tro try gksu +
> $some_GNOME_
a
> full gnome-session as root using gksu to try it out and make sure.
> No .ICEauthority was created at all.
>=20
> gksu does leave some variables like USERNAME and LOGNAME untouched,
> though, so a misbehaving program could be the problem there. I tried
> synaptic, though, and it works without creating a .ICEauthority.
>=20
> Haven't you tried to run something else as root, using other means,
> maybe?
>=20
> See ya,
>=20
I tried to launch various gnome programs as root or not but there is no
=2EICEauthority file created.
The only way to obtain a .ICEauthority file is at the first launch of a
gnome session. The file has the good owner.
If I delete the file, it is never recreated.
I can't manage to find what program created this file.
Debian Bug Importer (debzilla) wrote : | #15 |
Message-ID: <email address hidden>
Date: Sat, 3 Sep 2005 10:10:07 +0200
From: =?iso-8859-
To: <email address hidden>
Subject: bug is unreproducible, downgrading
severity 325701 important
tag 325701 + unreproducible
thanks
--=20
Lo=EFc Minier <email address hidden>
Come, your destiny awaits!
In Debian Bug tracker #325701, Ashley Jennings (fooscope) wrote : Re: Bug#325701: gnome-session: unable to launch gnome due to bad group/owner on .ICEauthority | #16 |
Hi Olivier,
Some information about this bug. I have fixed this same issue on a
Sarge install in the last couple of days and tracked it down to when I
ran
% sudo kwifimanager
it created this .ICEauthority in my user home dir which cause Gnome boot to fail
-rw------- 1 root root 362 2005-11-30 15:37 .ICEauthority
all the best
Ashley
PS this is my first time using the BTS and I am learning as I go. I
shall report this bug to kwifimanager too.
Debian Bug Importer (debzilla) wrote : | #17 |
Message-ID: <email address hidden>
Date: Wed, 30 Nov 2005 15:47:05 +0800
From: Ashley Jennings <email address hidden>
To: <email address hidden>
Subject: Re: Bug#325701: gnome-session: unable to launch gnome due to bad group/owner on
.ICEauthority
Hi Olivier,
Some information about this bug. I have fixed this same issue on a
Sarge install in the last couple of days and tracked it down to when I
ran
% sudo kwifimanager
it created this .ICEauthority in my user home dir which cause Gnome boot to=
fail
-rw------- 1 root root 362 2005-11-30 15:37 .ICEauthority
all the best
Ashley
PS this is my first time using the BTS and I am learning as I go. I
shall report this bug to kwifimanager too.
In Debian Bug tracker #325701, Josselin Mouette (joss) wrote : Re: Bug#325701: gnome-session: unable to launch gnome due to bad group/owner on .ICEauthority | #18 |
Le mercredi 30 novembre 2005 à 15:47 +0800, Ashley Jennings a écrit :
> Hi Olivier,
>
> Some information about this bug. I have fixed this same issue on a
> Sarge install in the last couple of days and tracked it down to when I
> ran
>
> % sudo kwifimanager
>
> it created this .ICEauthority in my user home dir which cause Gnome boot to fail
>
> -rw------- 1 root root 362 2005-11-30 15:37 .ICEauthority
Sorry for the incredibly long delay.
Olivier, do you know whether the .ICEauthority issue could have been
caused by a KDE program? Can you still reproduce it right now? If you
can, does it happen for all KDE programs?
Regards,
--
Josselin Mouette /\./\
"Do you have any more insane proposals for me?"
In Debian Bug tracker #325701, Josselin Mouette (joss) wrote : | #19 |
Le samedi 30 décembre 2006 à 19:19 +0100, Olivier Schwander a écrit :
> I didn't manage to reproduce the problem:
> I tried to launch kcontrol with su, the only way to modify .ICEauthority
> file is to do HOME=/home/olivier before.
> With gksu, .ICEauthority isn't modified but with sudo it is.
> But the right owner/group is set by gdm at a new login so all works
> properly.
Looks like the following change in GDM:
- Fix for ensuring .ICEauthority file has proper ownership/
Addresses CVE-2006-1057. (Hans Petter Jansson)
If everything is OK now, may I close this bug?
--
.''`.
: :' : We are debian.org. Lower your prices, surrender your code.
`. `' We will add your hardware and software distinctiveness to
`- our own. Resistance is futile.
In Debian Bug tracker #325701, Sven Arvidsson (sa) wrote : Close 325701 | #20 |
Version: 2.14.3-5
I'm closing this bug as there have been no activity, or no response to
followup questions, and new releases of the package in question which
likely has fixed this bug or made it obsolete.
Feel free to reopen the report if you think the bug still is valid.
--
Cheers,
Sven Arvidsson
http://
PGP Key ID 760BDD22
Changed in gnome-session: | |
status: | Unconfirmed → Fix Released |
Automatically imported from Debian bug report #325701 http:// bugs.debian. org/325701