touch-packages team mailing list archive
-
touch-packages team
-
Mailing list archive
-
Message #133933
[Bug 1067779] Re: missing pam_loginuid.so breaks getlogin()
at (3.1.15-1) unstable; urgency=medium
* New upstream release:
+ pam.conf: require pam_loginuid.so (Closes: #677442)
* Bumped Standards-Version to 3.9.5 (no changes).
-- Ansgar Burchardt <ansgar@xxxxxxxxxx> Sun, 10 Aug 2014 14:03:16
+0200
** Changed in: at (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/1067779
Title:
missing pam_loginuid.so breaks getlogin()
Status in at package in Ubuntu:
Fix Released
Status in cron package in Ubuntu:
Fix Released
Status in openssh package in Ubuntu:
Fix Released
Status in shadow package in Ubuntu:
Fix Released
Status in at package in Debian:
Fix Released
Status in cron package in Debian:
Fix Released
Status in openssh package in Debian:
Fix Released
Status in shadow package in Debian:
Fix Released
Bug description:
getlogin() call in new glibc checks /proc/self/loginuid presence and
trust its value as most safe source (due it's audit-related nature).
But default /etc/pam.d/common-account doesn't contains entry to
pam_loginuid.so which modify /proc/self/loginuid properly. This breaks
getlogin() at many scenarios like this:
(pam session without pam_loginuid)$ perl -e '$t=getlogin; print "$t\n";'
root
(pam session without pam_loginuid)$ id
uid=1000(...
just because /proc/self/loginuid contains '0' value
If I add pam_loginuid.so to /etc/pam.d/common-account like
http://manpages.ubuntu.com/manpages/precise/man8/pam_loginuid.8.html
recommend, everything worked as expected:
(pam session with pam_loginuid)$ perl -e '$t=getlogin; print "$t\n";'
user
(pam session with pam_loginuid)$ id
uid=1000(...
# cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=12.04
DISTRIB_CODENAME=precise
DISTRIB_DESCRIPTION="Ubuntu 12.04 LTS"
# dpkg -l|fgrep libpam
ii libpam-ck-connector 0.4.5-2 ConsoleKit PAM module
ii libpam-modules 1.1.3-7ubuntu2 Pluggable Authentication Modules for PAM
ii libpam-modules-bin 1.1.3-7ubuntu2 Pluggable Authentication Modules for PAM - helper binaries
ii libpam-runtime 1.1.3-7ubuntu2 Runtime support for the PAM library
ii libpam0g 1.1.3-7ubuntu2 Pluggable Authentication Modules library
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/at/+bug/1067779/+subscriptions