lp://staging/~barry/ubuntu/lucid/fuse/bug-697792

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp://staging/ubuntu/lucid/fuse

Ubuntu Development Team: Pending requested 2011-01-24

Diff: 51 lines (+21/-5)

2 files modified

debian/changelog (+9/-0)
debian/fuse-utils.postinst (+12/-5)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #697792: permissions of /etc/fuse.conf are reset on upgrade

Medium

Fix Released

Link a bug report

Related blueprints

42. By Barry Warsaw on 2011-01-24

debian/fuse-utils.postinst:
Respect local modifications to /etc/fuse.conf by not changing the
ownership or mode of /etc/fuse.conf in the postinst file unless we're
also adding the fuse group for the first time. (LP: #697792)

41. By Kees Cook on 2010-01-25

* SECURITY UPDATE: local attacker can trick fuse into unmounting a
  filesystem from the wrong location.
  - debian/patches/200-fix_mount_symlink_handling: upstream
    fixes.
  - CVE-2009-3297

40. By Michael Bienia on 2010-01-13

* Merge with Debian testing (lp: #506958). Remaining changes:
  - debian/control: Add Breaks to ensure right version of udev is used.
  - Use udev rules instead of init script:
    + Add debian/45-fuse.rules: Put /dev/fuse into group fuse.
    + debian/fuse-utils.postinst: Try to load the fuse module only if it's
      still a module, remove it from /etc/modules/ anyway.
    + debian/rules, debian/fuse-utils.install: Don't install the init
      script; install the udev rule.
  - initramfs support, for booting from ntfs-3g in wubi:
    + debian/fuse-utils.initramfs-hook: Copy /sbin/mount.fuse and the fuse
      kernel module into the initramfs. Use manual_add_modules not
      force_load; fuse will be loaded automatically if necessary (it's a
      built-in in Ubuntu anyway)
    + debian/rules: Install above file into fuse-utils.
    + debian/fuse-utils.postinst: Call update-initramfs.
    + (Forwarded to Debian #505691)
  - Create libfuse2-udeb and fuse-utils-udeb. (Forwarded to Debian #505697)
  - debian/fuse-utils.install: Install ulockmgr_server.
  - debian/{rules,libfuse2.install,fuse-utils.lintian}: Move fusermount and
    ulockmgr_server to /bin and associated libraries to /lib. This allows
    mounting ntfs filesystems in /etc/fstab. (Debian #452412)
  - debian/{rules,fuse-utils.postinst}: Install fusermount with 4755
    permissions (remaining change from "Dynamic foreground user access").
  - debian/fuse-utils.postinst:
    + Don't fail if udev is running and /dev/fuse does not exist.
      (Forwarded to Debian #505685)
  - debian/fuse-utils.preinst:
    + Remove the module configuration file on upgrade if unmodified.
    + Remove old rules file if unchanged

39. By Scott James Remnant (Canonical) on 2009-12-18

* debian/fuse-utils.initramfs-hook:
  - use manual_add_modules not force_load; fuse will be loaded automatically
    if necessary (it's a built-in in Ubuntu anyway)

38. By Michael Vogt on 2009-10-28

* debian/fuse-utils.postinst:
  - do not fail if udev can not be reloaded (LP: #444979)

37. By Scott James Remnant (Canonical) on 2009-03-05

* debian/fuse-utils.modprobe: Drop, we'll build this module into the kernel
  and do this with the other kernel filesystems
* debian/fuse-utils.preinst: Remove on upgrade if unmodified
* debian/rules: Update
* debian/fuse-utils.install: Update
* debian/fuse-utils-udeb.install: Update
* debian/fuse-utils.postinst: Only try to load if it's still a module,
  remove from /etc/modules anyway

36. By Oliver Grawert on 2009-01-14

drop makedev from dependencies, we never used it anyway

35. By Scott James Remnant (Canonical) on 2009-01-09

* debian/rules: Install udev rules into /lib/udev/rules.d
* debian/fuse-utils.install: Update path
* debian/fuse-utils.preinst: Remove old rules file if unchanged.
* debian/control: Add Breaks to ensure right version of udev is used.

34. By Martin Pitt on 2008-11-14

* Merge with Debian unstable. Remaining Ubuntu changes:
  - Use udev rules instead of init script:
    + Add debian/45-fuse.rules: Put /dev/fuse into group fuse.
    + Add debian/fuse-utils.modprobe: Mount/Umount fusectl fs on module
      loading/unloading.
    + debian/fuse-utils.postinst: Load fuse module and add it to
      /etc/modules, so that it is loaded at boot time.
    + debian/rules, debian/fuse-utils.install: Don't install the init
      script; install the udev rule and the module configuration file instead.
    + (Not forwarded to Debian; lots of effort for a questionably small boot
      speed improvement, and will be obsolete with proper upstart scripts.)
  - debian/fuse-utils.install: Install ulockmgr_server.
  - debian/fuse-utils.postinst: Don't fail if udev is running and /dev/fuse
    does not exist. (Forwarded to Debian #505685)
  - debian/{rules,libfuse2.install,fuse-utils.lintian}: Move fusermount and
    ulockmgr_server to /bin and associated libraries to /lib. This allows
    mounting ntfs filesystems in /etc/fstab. (Debian #452412)
  - Create libfuse2-udeb and fuse-utils-udeb. (Forwarded to Debian #505697)
  - initramfs support, for booting from ntfs-3g in wubi:
    + debian/fuse-utils.initramfs-hook: Copy /sbin/mount.fuse and the fuse
      kernel module into the initramfs.
    + debian/rules: Install above file into fuse-utils.
    + debian/fuse-utils.postinst: Call update-initramfs.
    + (Forwarded to Debian #505691)
  - Dynamic foreground user access: (Ubuntu specific until Debian uses
    ACL-enabled hal)
    + debian/fuse-utils.postinst: Keep /bin/fusermount as world executable.
      It already bails out correctly if the user does not have access to
      /dev/fuse; no reason to control access to it in two different places,
      and the permissions of the binary can't be changed in a flexible way.
    + Add debian/10-fuse-permissions.fdi: Enable hal's dynamic ACL
      management for /dev/fuse, so that local foreground consoles will have
      access to it.
    + debian/fuse-utils.install: Install FDI.

33. By Martin Pitt on 2008-09-25

* debian/fuse-utils.postinst: Install /bin/fusermount as world executable.
  it already bails out correctly if the user does not have access to
  /dev/fuse; no reason to control access to it in two different places (and
  the permissions of the binary can't be changed in a flexible way).
* Add debian/10-fuse-permissions.fdi: Enable hal's dynamic ACL management
  for /dev/fuse, so that local foreground consoles will have access to it.
  Install it in debian/fuse-utils.install.
* Drop debian/fuse-utils-needs-users-added-to-fuse-group.update-notifier and
  its installation in the postinst, it's not really relevant any more.
* See intrepid-device-permissions spec for details.