The meaning and implications of the "n download is performed unsandboxed as root as file" message on apt
When trying to install .deb packages I keep getting an error at the end of the installation. It says "N: Download is performed unsandboxed as root as file /home/user/Download/.deb couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied) ".
n download is performed unsandboxed as root as file
Usually apt uses the user _apt to download packages. In your case _apt doesn't have write permission to either /var/cache/apt/archives/partial/ or an existing file /var/cache/apt/archives/partial/samba-libs_2%3a4.5.8+dfsg-0ubuntu0.17.04.1_i386.deb so it downloaded the file as root.
Even when Florian Diesch's fine answer here is implemented, I'm still getting this warning. I get it when I try and download source, with apt-get source ..., even if I try and download as root, like with sudo or su, (Debian 10.4 and apt 1.8.2.1).
N: Download is performed unsandboxed as root as file '/home/privileged/Downloads/brave/vivaldi-stable_3.8.2259.42-1_amd64.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
Appears to be stating that your download was performed as root and as such the sandboxed user (_apt) that apt uses to perform the checks/download on it prior to extraction and installation could not access it.
Below is the full outputdpkg-source: info: extracting ffmpeg in ffmpeg-4.2.2dpkg-source: info: unpacking ffmpeg_4.2.2.orig.tar.xzdpkg-source: info: unpacking ffmpeg_4.2.2-1.debian.tar.xzdpkg-source: info: using patch list from debian/patches/seriesdpkg-source: info: applying 0001-avcodec-arm-sbcenc-avoid-callee-preserved-vfp-regist.patchdpkg-source: info: applying 0002-avcodec-libtwolame-fix-mono-default-bitrate.patchW: Download is performed unsandboxed as root as file 'ffmpeg_4.2.2-1.dsc' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
I just installed some debs from a local directory using apt. After the install completed I got a warning about how the download was done unsandboxed because _apt got permission denied reading the files. This is because my home directory is 0700. I'm not sure that the sandboxing for reading files off the local disk is a useful thing to do but the warning definitely isn't a useful thing to print.
In case useful, I have just done a fresh install of Xenial, followed by 'sudo apt-get install synaptic'. The following error arose when trying to install blubuntu-theme and blubuntu-wallpapersW: Can't drop privileges for downloading as file '/root/.synaptic/tmp//tmp_sh' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied).After completely removing via synaptic, it installed fine with apt-get.
This should all be fixed in a hopefully near future with apt 1.6 or 1.7 opening these files as root and passing them down to the unprivileged processes via a socket. That's not yet implemented, though I do have mvo's branch from 2013 or so as a base.
@Chelmite The double slash is equivalent to a single slash, so there is not much of a problem here, just a very minor cosmetic issue. Synaptic is certainly the one who told APT to download stuff in /root/.synaptic/tmp, so it is the one which should have changed the ownership to _apt beforehand. You can easily fix that yourself.
n download is performed unsandboxed as root as file permission denied
n download is performed unsandboxed as root as file apt error
n download is performed unsandboxed as root as file ubuntu 22.04
n download is performed unsandboxed as root as file rocketchat
n download is performed unsandboxed as root as file realvnc server
n download is performed unsandboxed as root as file ffmpeg
n download is performed unsandboxed as root as file kali linux
n download is performed unsandboxed as root as file samba-libs
n download is performed unsandboxed as root as file synaptic manager
n download is performed unsandboxed as root as file _apt user
n download is performed unsandboxed as root as file fix
n download is performed unsandboxed as root as file warning
n download is performed unsandboxed as root as file solution
n download is performed unsandboxed as root as file chown
n download is performed unsandboxed as root as file chmod
n download is performed unsandboxed as root as file var cache apt archives partial
n download is performed unsandboxed as root as file deb package
n download is performed unsandboxed as root as file pkgAcquire Run
n download is performed unsandboxed as root as file sudo apt install
n download is performed unsandboxed as root as file home user downloads
n download is performed unsandboxed as root as file gpu sandbox
n download is performed unsandboxed as root as file disable gpu sandbox
n download is performed unsandboxed as root as file display compositor crashing
n download is performed unsandboxed as root as file trace breakpoint trap
n download is performed unsandboxed as root as file bugsnag loaded
n download is performed unsandboxed as root as file ask ubuntu
n download is performed unsandboxed as root as file superuser
n download is performed unsandboxed as root as file unix stackexchange
n download is performed unsandboxed as root as file new scientist
n download is performed unsandboxed as root as file the sun
n download is performed unsandboxed as root as file yahoo news
n download is performed unsandboxed as root as file nuclear fusion reactor
n download is performed unsandboxed as root as file korea superconducting tokamak advanced research kstar facility korea institute of fusion energy
n download is performed unsandboxed as root a
I'm also seeing the "W: Download is performed unsandboxed as root as file '/root/.synaptic/tmp//tmp_sh' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)" error. This is actually a fairly new thing, within the last few weeks. I'm on Linux Mint 19.2 (based on Ubuntu 18.04). Is there a fix yet?
On a Linux system, to compile pyGPlates follow the instructions in the files BUILD.Linux and DEPS.Linux in the root directorypygplates_0.36.0_src of the source code.Once the dependency libraries have been installed then this process essentially boils down to executingthe following commands in a Terminal in the root source code directory: