Your message dated Thu, 06 Sep 2007 10:17:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#370526: fixed in libpam-mount 0.20-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: libpam-mount
Version: 0.13-2
Severity: wishlist

If the user logs out while e.g. cron or root are holding resources
in the mounted volume, the unmount simply fails and the volume stays
mounted. If encrypted filesystems are in use, there's a security
issue here.

One way would be to use lazy unmounts. Now, if a users logs out, the
filesystem is actually unmounted when the last claim to it is over.
If the user then logs in, the filesystem is simply mounted again.

This leaves only the issue of the /dev/mapper nodes, which are left
around, and which are essentially unencrypted. Maybe libpam_mount
could leave a process which checks every few seconds whether the
/dev/mapper node is still in use, and if not, then removes it? If
libpam_mount actually uses cryptsetup for that, maybe we should
clone this bug?

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`.     martin f. krafft <[EMAIL PROTECTED]>
: :'  :    proud Debian developer and author: http://debiansystem.info
`. `'`
  `-  Debian - when you have better things to do than fixing a system

Attachment: signature.asc
Description: Digital signature (GPG/PGP)


--- End Message ---
--- Begin Message ---
Source: libpam-mount
Source-Version: 0.20-1

We believe that the bug you reported is fixed in the latest version of
libpam-mount, which is due to be installed in the Debian FTP archive:

libpam-mount_0.20-1.diff.gz
  to pool/main/libp/libpam-mount/libpam-mount_0.20-1.diff.gz
libpam-mount_0.20-1.dsc
  to pool/main/libp/libpam-mount/libpam-mount_0.20-1.dsc
libpam-mount_0.20-1_i386.deb
  to pool/main/libp/libpam-mount/libpam-mount_0.20-1_i386.deb
libpam-mount_0.20.orig.tar.gz
  to pool/main/libp/libpam-mount/libpam-mount_0.20.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bastian Kleineidam <[EMAIL PROTECTED]> (supplier of updated libpam-mount 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 05 Sep 2007 20:02:46 +0200
Source: libpam-mount
Binary: libpam-mount
Architecture: source i386
Version: 0.20-1
Distribution: unstable
Urgency: low
Maintainer: Bastian Kleineidam <[EMAIL PROTECTED]>
Changed-By: Bastian Kleineidam <[EMAIL PROTECTED]>
Description: 
 libpam-mount - PAM module that can mount volumes for a user session
Closes: 370526
Changes: 
 libpam-mount (0.20-1) unstable; urgency=low
 .
   * New upstream version.
     + Waits for up to 5 seconds when umounting a busy mount point.
       That and using lazy unmounting ("umount -l") should be enough
       workarounds for buggy applications that leave processes using
       the device after a session close. (Closes: #370526)
     + Uses new configuration file syntax; see NEWS.Debian for more info.
   * Dropped patches applied upstream:
     02_hide_debug, 05_mount_crypt_break, 08_mount_crypt_readonly_luksopen,
     11_no_debug, 17_readlink_path, 18_clear_krb5_env
   * Updated patches:
     03_debian_docs, 04_largefile64_macro, 06_debian_manpages,
     07_mount_option_space, 09_password_prompt, 10_mount_crypt_loop_check
     14_faq_debian, 21_delay_system_auth
   * Add fuse-utils to suggested packages.
   * Add truecrypt-utils to suggested packages. The truecrypt license is
     non-free but the user could have a private package for it.
   * Add davfs2 to suggested packages.
   * Mention new filesystem types in README.Debian.
   * Remove the "send patches" line of the description. It is sufficient
     to have it in the README and manpage.
Files: 
 ade56c4b4a14b3e5d1a466baefcda804 670 admin extra libpam-mount_0.20-1.dsc
 a078510df3c22e6ad7b5ad0ee0178d15 413279 admin extra 
libpam-mount_0.20.orig.tar.gz
 b169e35ad52cec6c99763512ff754e92 19256 admin extra libpam-mount_0.20-1.diff.gz
 0d610e1b767d74cbbda43e83e2c0019c 79014 admin extra libpam-mount_0.20-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG37+LeBwlBDLsbz4RAvjmAKC7HGQYhDKzFIMhd1wHvezy8jYIxwCgi/B4
HCQosq1SN9sEne2acL2JM48=
=Kjg9
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to