Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 473888 - net-misc/dropbox automatically downloads new version
Summary: net-misc/dropbox automatically downloads new version
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Ben Kohler
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-06-20 05:56 UTC by Justin Lecher (RETIRED)
Modified: 2020-09-10 14:24 UTC (History)
13 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Justin Lecher (RETIRED) gentoo-dev 2013-06-20 05:56:17 UTC
it just bumps to a new version into the users home folder.
This needs to be restricted.
Comment 1 Naohiro Aota gentoo-dev 2013-06-21 22:48:53 UTC
It seems that there are no way to stop auto updating.

https://forums.dropbox.com/topic.php?id=24046

However they don't do it for all new versions.

https://forums.dropbox.com/topic.php?id=101972
Comment 2 Gino McCarty 2014-01-13 07:25:35 UTC
A hack, but i just create an empty .dropbox-dist folder and remove all permissions from it.. works great so far.
Comment 3 Alex Efros 2014-04-10 10:10:38 UTC
Another issue with this: on hardened dropbox binary should be paxmarked, but while this auto-update dropbox tried to run newer version from /tmp/, which isn't paxmarked and thus crashes, which result in useless popup about "permission" error shown by dropbox.

    kern.alert: grsec: denied RWX mmap of <anonymous mapping> by /tmp/.dropbox-dist-new-GFMcIa/.dropbox-dist/dropbox[dropbox:11457] uid/euid:1000/1000 gid/egid:1000/1000, parent /opt/dropbox/dropbox[dropbox:11225] uid/euid:1000/1000 gid/egid:1000/1000
Comment 4 Alex Efros 2014-04-10 11:30:32 UTC
(In reply to Bombino from comment #2)
> A hack, but i just create an empty .dropbox-dist folder and remove all
> permissions from it.. works great so far.

Doesn't work for me. Where exactly you've created this folder? I've tried it in ~/Dropbox/ and ~/. Dropbox is installed in /opt/dropbox/ and tries to auto-update by unpacking from ~/Dropbox/.dropbox.cache/dropbox-upgrade-2.4.11.tar.gz into /tmp/.dropbox-dist-new-RANDOMNAME/.dropbox-dist/.
Comment 5 Gef 2014-08-15 16:47:07 UTC
(In reply to Alex Efros from comment #4)
> (In reply to Bombino from comment #2)
> > A hack, but i just create an empty .dropbox-dist folder and remove all
> > permissions from it.. works great so far.
> 
> Doesn't work for me. Where exactly you've created this folder? I've tried it
> in ~/Dropbox/ and ~/. Dropbox is installed in /opt/dropbox/ and tries to
> auto-update by unpacking from
> ~/Dropbox/.dropbox.cache/dropbox-upgrade-2.4.11.tar.gz into
> /tmp/.dropbox-dist-new-RANDOMNAME/.dropbox-dist/.

Currently running 2.10.2 (~amd64), and the following prevents the auto-updater from kicking in, so far (otherwise it would auto-update to 2.10.27 upon starting) :

rm -rf ~/.dropbox-dist
install -dm0 ~/.dropbox-dist
Comment 6 Alex Efros 2014-08-15 17:10:56 UTC
(In reply to Gef from comment #5)
> Currently running 2.10.2 (~amd64), and the following prevents the
> auto-updater from kicking in, so far (otherwise it would auto-update to
> 2.10.27 upon starting) :

Doesn't work with 2.6.33 (amd64) - on start it says I'm using an old version and fail both to auto-update and to start.
Comment 7 Alex Efros 2014-08-15 17:33:03 UTC
(In reply to Alex Efros from comment #6)
> (In reply to Gef from comment #5)
> > Currently running 2.10.2 (~amd64), and the following prevents the
> > auto-updater from kicking in, so far (otherwise it would auto-update to
> > 2.10.27 upon starting) :
> 
> Doesn't work with 2.6.33 (amd64) - on start it says I'm using an old version
> and fail both to auto-update and to start.

Same happens with 2.8.4 - looks like both 2.6.33 and 2.8.4 can be removed from portage because they didn't work anyway (after new install - currently installed works because they was auto-updated).

2.10.2 works ok and didn't auto-update after this trick with ~/.dropbox-dist - but I'm afraid it'll stop working soon like these 2.6.33 and 2.8.4 versions.
Comment 8 Alex Efros 2015-12-08 15:14:25 UTC
3.6.8 doesn't work anymore. And it fail to auto-update even if I remove ~/.dropbox-dist/ - probably because of bug 558378. Upgrade to 3.12.4 found in bug 566280 helps.
Comment 9 Ben Kohler gentoo-dev 2019-10-02 16:05:28 UTC
What do you guys think about a postinst einfo message telling users how to prevent autoupdate on each user account?
Comment 10 Jonas Stein gentoo-dev 2020-08-23 19:02:47 UTC
no objections after a year. Sounds good as workaround. Please do so.
Comment 11 Larry the Git Cow gentoo-dev 2020-09-10 14:24:49 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e8298bc3b32359c645aed5f948e837f3a9b4f479

commit e8298bc3b32359c645aed5f948e837f3a9b4f479
Author:     Ben Kohler <bkohler@gentoo.org>
AuthorDate: 2020-09-10 14:24:11 +0000
Commit:     Ben Kohler <bkohler@gentoo.org>
CommitDate: 2020-09-10 14:24:27 +0000

    net-misc/dropbox: add information on blocking autoupdate
    
    Closes: https://bugs.gentoo.org/473888
    Package-Manager: Portage-3.0.6, Repoman-3.0.1
    Signed-off-by: Ben Kohler <bkohler@gentoo.org>

 net-misc/dropbox/dropbox-104.4.175.ebuild | 8 ++++++++
 net-misc/dropbox/dropbox-105.4.649.ebuild | 8 ++++++++
 net-misc/dropbox/dropbox-105.4.651.ebuild | 8 ++++++++
 3 files changed, 24 insertions(+)