Your message dated Sat, 16 May 2026 23:15:07 +0200
with message-id <[email protected]>
and subject line Screen 5.0.x no longer uses utmp; no longer setgid
has caused the Debian Bug report #1036933,
regarding screen-udeb: Should screen really be installed setgid utmp?
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1036933: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036933
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: screen-udeb
Version: 4.9.0-4
Tags: d-i
X-Debbugs-Cc: Sven Joachim <[email protected]>, [email protected]
Recently I noticed that the screen program in the screen-udeb package is
installed setgid utmp, and I wonder if this actually makes any sense.
While I do not have much experience with the installer, I would expect
it to run all programs as root anyway, so there should be no need for
setgid there.
Having screen installed setgid sets up a secure execution environment
that precludes the use of certain environment variables, see the
"Secure-execution mode" section in ld.so(8). Recently ncurses has also
started to restrict such programs, see #1034372.
Hopefully none of this matters much. I have CC'ed debian-boot, as the
people working on the installer will be much more qualified to give
advice than I am.
--- End Message ---
--- Begin Message ---
Version: 4.9.1-2
Hi,
This is fixed since screen 4.9.1-2: in screen-udeb, /usr/bin/screen is
no
longer installed setgid utmp (mode 0755).
Current 5.0.1 packaging keeps that behavior, and now also builds with
--disable-utmp.
Cheers,
Peter Dey
--- End Message ---
