Bug 1854 - .config and ,bash_history created in /
Summary: .config and ,bash_history created in /
Status: RESOLVED DUPLICATE of bug 2719
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 1
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: John Balcaen
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-06-19 16:41 CEST by james Whitby
Modified: 2011-10-02 20:21 CEST (History)
3 users (show)

See Also:
Source RPM:
CVE:
Status comment:


Attachments

Description james Whitby 2011-06-19 16:41:10 CEST
Description of problem:
A .config and a .bash_history file are created in the / dir when X is started ( or attempted to start ).

Version-Release number of selected component (if applicable):


How reproducible:
Login or attempt to start X remotely.

Steps to Reproduce:
1.ssh into a machine.
2.startx
3.ls -a /

The startx will fail, but the files are created.

If the files are removed. They will be created at any X login, failed or or not.

This is for any user not root.

There are several reports on alt.os.linux.mageia about this.
Comment 1 james Whitby 2011-06-19 23:24:25 CEST
Please ignore the reference to .bash_history. That is/was a different problem.
Comment 2 Dave Hodgins 2011-06-19 23:42:24 CEST
The .bash_history in the root directory gets created anytime you start
in run level 1.

The .config directory did exist in my Mageia 1 clean install, however, once
I delete it, it does not get recreated on my system.

Same with my Mageia Cauldron installation.

CC: (none) => davidwhodgins

Comment 3 Samuel Verschelde 2011-10-01 13:33:40 CEST
so, do we know where this .config comes from ? I have it on my system too but never SSHed to the machine.

CC: (none) => stormi

Samuel Verschelde 2011-10-01 13:33:52 CEST

Keywords: (none) => NEEDINFO

Comment 4 Dave Hodgins 2011-10-02 01:35:56 CEST
I ran quite a few tests, each time starting with a minimal+lxde install,
using run level 3.

Installing task-kde4-minimal from a lxde-terminal /.config/trolltech.conf
was created (based on the timestamp and /var/log/syslog entries) during
the processing of the file-triggers from kdebase4-workspace.

The dbus configuration was reloaded 4 times as kdebase4-workspace was
installed.

Based on the time and ps output, the file was created the same second
a kwin task was started (only process started that second still running
when I checked the ps output).

But, during 6 repeat installs under various conditions, including one
just like the above, it was never recreated.  System was restored from
image each time I repeated the test, so I no longer have anything from
the one time it was created.

I'm using a single core processor, so this makes a race condition less
likely.

Hopefully this will help narrow down the cause, and not cause a wild
goose chase. :-)
Comment 5 Samuel Verschelde 2011-10-02 09:03:10 CEST
And I didn't even think of looking *inside* the .config directory! It's a Trolltech.conf file too. Assigning to mikala in case he knows about this.

Assignee: bugsquad => balcaen.john

Samuel Verschelde 2011-10-02 09:03:16 CEST

Keywords: NEEDINFO => (none)

Comment 6 John Balcaen 2011-10-02 16:29:27 CEST
Well i guess if there's a file trigger launching/updating a Qt related app it's normal to have the config file from Qt created since urpmi works as root.
But from what i'm reading it's not related to the startx problem at all.
Maybe we should check which argument are passed to ssh before starting the xserver ?

CC: (none) => balcaen.john

Comment 7 Samuel Verschelde 2011-10-02 16:39:33 CEST
(In reply to comment #6)
> Well i guess if there's a file trigger launching/updating a Qt related app it's
> normal to have the config file from Qt created since urpmi works as root.
> But from what i'm reading it's not related to the startx problem at all.
> Maybe we should check which argument are passed to ssh before starting the
> xserver ?

Just in case you missed it, I don't think I have a ssh server on my computer but I still have this .config/Trolltech.conf file :)
Comment 8 Dick Gevers 2011-10-02 17:29:04 CEST
This is a duplicate of #2719 or vice versa.

See Also: (none) => https://bugs.kde.org/show_bug.cgi?id=249217

Comment 9 John Balcaen 2011-10-02 20:21:06 CEST
hum seems like i miss again (like in #2719) the / & not /root.
Making this one duplicate since the upstream bug is already available in # 2719
Thanks dicks for noticing :)

*** This bug has been marked as a duplicate of bug 2719 ***

Status: NEW => RESOLVED
Resolution: (none) => DUPLICATE


Note You need to log in before you can comment on or make changes to this bug.