Nautilus prompts to execute plain text files on sshfs mounts

Bug #1017870 reported by Alkis Georgopoulos
18
This bug affects 3 people
Affects Status Importance Assigned to Milestone
sshfs-fuse (Ubuntu)
Fix Released
Medium
Unassigned
Precise
Fix Released
Undecided
Unassigned

Bug Description

Precise, nautilus 1:3.4.2-0ubuntu3

[rationale]
Nautilus (and possibly others) consider all files on a sshfs volume to be executable.

[test case]
mkdir /tmp/etc
sshfs localhost:/etc /tmp/etc
nautilus /tmp/etc
=> double click on "adduser.conf"

Nautilus prompts:
Do you want to run "adduser.conf", or display its contents?
"adduser.conf" is an executable text file.
[Run in Terminal] [Display] [Cancel] [Run]

Of course the "adduser.conf" permissions are fine in the file system and in the sshfs mount, it's not executable.

[regression potential]
The patch was taken from the upstream maling-list by the main developer, so it should be safe. Worst case scenario, I'd expect sshfs to fail pretty badly which should be discovered quite easily by testing.

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. The issue you are reporting is an upstream one and it would be nice if somebody having it could send the bug to the developers of the software by following the instructions at https://wiki.ubuntu.com/Bugs/Upstream/GNOME. If you have done so, please tell us the number of the upstream bug (or the link), so we can add a bugwatch that will inform us about its status. Thanks in advance.

Changed in nautilus (Ubuntu):
importance: Undecided → Low
Changed in nautilus:
importance: Unknown → Medium
status: Unknown → New
Changed in nautilus:
status: New → In Progress
Revision history for this message
Alkis Georgopoulos (alkisg) wrote :

The upstream sshfs-fuse developer proposed this patch to fix the issue:
http://sourceforge.net/mailarchive/message.php?msg_id=29804620

Removing the Nautilus tasks as the problem was in sshfs.

Changed in sshfs-fuse (Ubuntu):
importance: Undecided → Medium
status: New → Triaged
no longer affects: nautilus
no longer affects: nautilus (Ubuntu)
no longer affects: nautilus (Ubuntu Precise)
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package sshfs-fuse - 2.4-1ubuntu1

---------------
sshfs-fuse (2.4-1ubuntu1) quantal; urgency=low

  * Return the correct X_OK access for sshfs mounts (LP: #1017870).
 -- Alkis Georgopoulos <email address hidden> Fri, 14 Sep 2012 14:22:37 -0400

Changed in sshfs-fuse (Ubuntu):
status: Triaged → Fix Released
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in sshfs-fuse (Ubuntu Precise):
status: New → Confirmed
Revision history for this message
Martin Pitt (pitti) wrote :

Uploaded to precise-proposed queue, unsubscribing sponsors. Thanks!

Changed in sshfs-fuse (Ubuntu Precise):
status: Confirmed → In Progress
Revision history for this message
Clint Byrum (clint-fewbar) wrote : Please test proposed package

Hello Alkis, or anyone else affected,

Accepted sshfs-fuse into precise-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/sshfs-fuse/2.3-1ubuntu0.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please change the bug tag from verification-needed to verification-done. If it does not, change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in sshfs-fuse (Ubuntu Precise):
status: In Progress → Fix Committed
tags: added: verification-needed
Adam Zammit (adamzammit)
tags: added: verification-done
removed: verification-needed
Revision history for this message
Brian Murray (brian-murray) wrote :

Adam could you please provide some details regarding the testing that you performed? Thanks in advance!

Revision history for this message
Adam Zammit (adamzammit) wrote :

Dear Brian,

I am running an LTSP setup on 12.04. On the LTSP AMD64 image, I installed the packages from the proposed repository by adding precise-proposed to the sources list then running: apt-get install sshfs/precise-proposed sshfs-dbg/precise-proposed

I then updated the ltsp image and rebooted the ltsp client computers. Access to the home directories via sshfs is automatically set up. When I downloaded a new file with firefox and went to open it - I no longer got the warning about running an executable file.

I also tried double clicking on PDF files and text files in my sshfs mounted home directory using Nautilus and did not receive any warning messages about running an executable file.

Regards,
Adam Zammit

Revision history for this message
Colin Watson (cjwatson) wrote : Update Released

The verification of this Stable Release Update has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regresssions.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package sshfs-fuse - 2.3-1ubuntu0.1

---------------
sshfs-fuse (2.3-1ubuntu0.1) precise-proposed; urgency=low

  * Return the correct X_OK access for sshfs mounts (LP: #1017870).
 -- Alkis Georgopoulos <email address hidden> Fri, 14 Sep 2012 21:21:36 +0300

Changed in sshfs-fuse (Ubuntu Precise):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.