touch-packages team mailing list archive

[Mark Stosberg <mark@xxxxxxxxxxxx>]

This remains a potential security issue with Ubuntu 14.04.

It appears that the util-linux (2.25-5) should set the login shell as
"nologin". It seems here we need an update which finds the shells
already set as /bin/sh and resets them to "nlogin"

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to util-linux in Ubuntu.
https://bugs.launchpad.net/bugs/1319973

Title:
  libuuid needs a default shell (seems to not specify any?)

Status in util-linux package in Ubuntu:
  Confirmed
Status in util-linux source package in Trusty:
  Confirmed
Status in util-linux source package in Utopic:
  Confirmed
Status in util-linux package in Debian:
  Fix Released

Bug description:
  antarus@killbot:~$ getent passwd libuuid
  libuuid:x:100:101::/var/lib/libuuid:

  A missing shell specification means it takes the default shell
  (usually /bin/sh).


  DISTRIB_CODENAME=trusty
  DISTRIB_DESCRIPTION="Ubuntu Trusty Tahr (development branch)"
  DISTRIB_ID=Ubuntu
  DISTRIB_RELEASE=14.04

  antarus@killbot:/tmp$ apt-cache policy libuuid1
  libuuid1:
    Installed: 2.20.1-5.1ubuntu20
    Candidate: 2.20.1-5.1ubuntu20

  It should have /usr/sbin/nologin as its shell.

  -A

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/1319973/+subscriptions