Your message dated Mon, 21 Jul 2008 12:17:05 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#410758: fixed in sash 3.7-8
has caused the Debian Bug report #410758,
regarding sash: bad practice of multiple accounts with uid==0 lead to broken
system
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
410758: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=410758
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: sash
Version: 3.7-7.2
Severity: important
Today, after unsucsessful attempt to login as sashroot, I've got somewhat
broken system -- all processes running under uid=0 were reported
belonging to sashroot. Due to lack of knowledge of nss internals I
inquired on -devel mailing list and it seems that multiple accounts
sharing uid=0 might be considered a bad practice. For more details see
http://lists.debian.org/debian-devel/2007/02/msg00323.html
thread.
If you can prove that it is 'documented feature of nss' to resolve in
some deterministic way a uid whenever multiple ones are possible, then
probably this bug has to be reassigned against libc6 to which
libnss_files belongs.
Since this bug might drive whole system broken, I am assigning it
important priority, since a big proportion of sash users probably use
sashroot account feature.
Thank you.
-- System Information:
Debian Release: 4.0
APT prefers testing-proposed-updates
APT policy: (500, 'testing-proposed-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-2-amd64-generic
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages sash depends on:
ii debconf [debconf-2.0] 1.5.11 Debian configuration management sy
ii lockfile-progs 0.1.10 Programs for locking and unlocking
ii passwd 1:4.0.18.1-6 change and administer password and
sash recommends no packages.
-- debconf information:
sash/delete_sashroot_on_remove: false
* sash/clone_root_passwd: true
* sash/create_sashroot: true
sash/change_root_shell: false
--- End Message ---
--- Begin Message ---
Source: sash
Source-Version: 3.7-8
We believe that the bug you reported is fixed in the latest version of
sash, which is due to be installed in the Debian FTP archive:
sash_3.7-8.diff.gz
to pool/main/s/sash/sash_3.7-8.diff.gz
sash_3.7-8.dsc
to pool/main/s/sash/sash_3.7-8.dsc
sash_3.7-8_amd64.deb
to pool/main/s/sash/sash_3.7-8_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Tollef Fog Heen <[EMAIL PROTECTED]> (supplier of updated sash package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 21 Jul 2008 13:45:15 +0200
Source: sash
Binary: sash
Architecture: source amd64
Version: 3.7-8
Distribution: unstable
Urgency: medium
Maintainer: Tollef Fog Heen <[EMAIL PROTECTED]>
Changed-By: Tollef Fog Heen <[EMAIL PROTECTED]>
Description:
sash - Stand-alone shell
Closes: 400892 410758 416059 437952 464610 482900 489380
Changes:
sash (3.7-8) unstable; urgency=medium
.
* Get rid of the sashroot account and all debconfiscation (but don't
change already-set up systems).
Closes: #410758, #400892, #482900, #489380
* Unconditionally remove sashroot when removing the package.
Closes: #464610
* Call add-shell when upgrading from etch or older. Closes: #416059.
* Remove -s from LDFLAGS. Closes: #437952
* Stop setting PATH in postinst.
* Update to newest policy version
- Add Homepage field.
Checksums-Sha1:
d116c7193e05dde0cd220834d30bed281bf63bdc 953 sash_3.7-8.dsc
09207a692090ecaac3637c5bf835614391138dea 7956 sash_3.7-8.diff.gz
eaf43af7d1367d3cb286ed240d1f198d53881d3d 361076 sash_3.7-8_amd64.deb
Checksums-Sha256:
968ee724b0d18c61d7c77f50d6354ba136e0ea8e7ecba605fcdb3d40cf813540 953
sash_3.7-8.dsc
849ed0f20d605d9a219505b0028b100420c5107c178ad9ade89d2c52391b552e 7956
sash_3.7-8.diff.gz
432b486c3eed6e16cb2e86476efc308b0e7d3c6a1ece32562df46a1d3888a23e 361076
sash_3.7-8_amd64.deb
Files:
247fb15586100289231242340c015280 953 shells optional sash_3.7-8.dsc
caf3bcde45ce9e13671cec63c2c2e46a 7956 shells optional sash_3.7-8.diff.gz
55b68f6680e35e6dea4ab3bb6d220935 361076 shells optional sash_3.7-8_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkiEfcQACgkQQSseMYF6mWrypQCgu2ebANuzKq4/klImcjvt9luu
buoAoJytQaXUdPna4qAAQprOCJhd6OUu
=S8+9
-----END PGP SIGNATURE-----
--- End Message ---
