#546911 apt-extracttemplates should extract to /var/lib/apt/tmp and not /tmp so that /tmp can be mounted noexec

Package:
apt
Source:
apt
Description:
commandline package manager
Submitter:
Raphaël Hertzog
Date:
2021-10-06 17:12:05 UTC
Severity:
normal
#546911#5
Date:
2009-09-16 12:38:21 UTC
From:
To:
Hi,

Some administrators like to mount /tmp and /var/tmp with the noexec
option. That makes it harder for people to download and execute
malware when they manage to execute commands through a web application
vulnerability for example.

However those admins always have to change APT::ExtractTemplates::TempDir
to point it to another directory because the config scripts that are
extracted with apt-extracttemplates have to be executed...

It would thus be nice to change the default directory in favor of
a private temporary directory so that this step is no more required.
#546911#10
Date:
2019-05-26 05:36:37 UTC
From:
To:


It may at least be helpful to check for noexec /tmp and give some kind of warning.
-----BEGIN PGP SIGNATURE-----
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=Wb3V
-----END PGP SIGNATURE-----