Package: synaptic
Version: 0.81.2
Severity: important

Dear Maintainer,

clicking on "Visit Homepage" in the description of a package in synaptic
starts the web browser as root, which seems to be a very bad idea.

I use Gnome and started synaptic from the Dashboard or overview so the
Exec=... command from /usr/share/applications/synaptic.desktop was used,
which is synaptic-pkexec.
It happens with jessie as well as sid and I also tried it on another
computer with Mate as desktop environment starting synaptic from the
menu and the same thing happens there. The default browser, that got
startet, was epiphany(-browser) in both cases.
I only noticed this behavior, because I found some files and folders
(e,g, ~/.config) in my root-account, which I didn't expect there and
because my bookmarks in the browser where missing, when it got started
that way.

best regars,
Philipp Smutny


-- System Information:
Debian Release: 8.0
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500,
'testing-proposed-updates'), (500, 'testing'), (300, 'unstable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_AT.utf8, LC_CTYPE=de_AT.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages synaptic depends on:
ii  hicolor-icon-theme   0.13-1
ii  libapt-inst1.5       1.0.9.7
ii  libapt-pkg4.12       1.0.9.7
ii  libatk1.0-0          2.14.0-1
ii  libc6                2.19-17
ii  libcairo-gobject2    1.14.0-2.1
ii  libcairo2            1.14.0-2.1
ii  libept1.4.12         1.0.12.1
ii  libgcc1              1:4.9.2-10
ii  libgdk-pixbuf2.0-0   2.31.1-2+b1
ii  libglib2.0-0         2.42.1-1
ii  libgtk-3-0           3.14.5-1
ii  libpango-1.0-0       1.36.8-3
ii  libpangocairo-1.0-0  1.36.8-3
ii  libstdc++6           4.9.2-10
ii  libvte-2.90-9        1:0.36.3-1
ii  libx11-6             2:1.6.2-3
ii  libxapian22          1.2.19-1
ii  libxext6             2:1.3.3-1
ii  zlib1g               1:1.2.8.dfsg-2+b1

Versions of packages synaptic recommends:
ii  libgtk2-perl   2:1.2492-4
ii  policykit-1    0.105-8
pn  rarian-compat  <none>

Versions of packages synaptic suggests:
pn  apt-xapian-index         <none>
pn  deborphan                <none>
pn  dwww                     <none>
pn  menu                     <none>
pn  software-properties-gtk  <none>
pn  tasksel                  <none>

-- no debconf information


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to