Your message dated Tue, 16 Jun 2026 19:22:02 +0000
with message-id <[email protected]>
and subject line Bug#1140119: fixed in debhelper 14.1
has caused the Debian Bug report #1140119,
regarding dh_installpam breaks other packages and violates Debian PAM mini
policy; /usr/lib/pam.d is not supported
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1140119: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140119
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
package: debhelper
severity: critical
version: 14.0.0
justification: Breaks unrelated packages
In debhelper compatibility version 14, Debhelper starts installing pam
files in /usr/lib/pam.d.
This change was made with no consultation with the pam maintainer. I
checked my mail for messages containing both pam and debhelper and
didn't find any relevant messages.
This breaks things; see for example https://bugs.ebian.org/1140029 and
https://bugs.debian.org/1140083
More over, I announced in 2023 that Debian would not be supporting
/usr/lib/pam.d:
https://lists.debian.org/[email protected]
In addition, the Debian PAM mini-policy
[/usr/share/doc/libpam0g/Debian-PAM-MiniPolicy.gz] requires that each pam
application have a file in /etc/pam.d:
> Each application that uses PAM also must contain a file in /etc/pam.d/.
> This file specifies which PAM modules will be used for the common PAM
>functions in that application.
It's not clear what formal force the Debian PAM MiniPolicy has, but in
general I do think we've allowed packages (and their maintainers) that
provide a service like pam to have significant influence over how that
service is consumed..
I appreciate that my handling of this situation has not been great:
* The Debian PAM man pages do mention /usr/lib/pam.d
* there is partial /usr/lib/pam.d support I thought it was tied to the
vendordri support, but apparently not completely. .
What I'm going to do to make the situation better for the next few days:
I will at least for now fix pam_include to support /usr/lib/pam.d.
I'm going to hold a serious bug open on pam and I'm not at all convinced
I will let that change into testing.
I don't think I can completely remove /usr/lib/pam.d support in forky
without doing a lot more research, but I do think I can log an error
when a config file is found there instead of /etc/pam.d.
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: debhelper
Source-Version: 14.1
Done: Niels Thykier <[email protected]>
We believe that the bug you reported is fixed in the latest version of
debhelper, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Niels Thykier <[email protected]> (supplier of updated debhelper package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 16 Jun 2026 18:44:38 +0000
Source: debhelper
Architecture: source
Version: 14.1
Distribution: unstable
Urgency: medium
Maintainer: Debhelper Maintainers <[email protected]>
Changed-By: Niels Thykier <[email protected]>
Closes: 1140119
Changes:
debhelper (14.1) unstable; urgency=medium
.
* dh_installpam: Revert compat 14 change at request of the `pam`
maintainers. (Closes: #1140119)
Checksums-Sha1:
8b302cf10291a3b63d92a317a2b20c487d4d5739 2044 debhelper_14.1.dsc
5dbbf1761df747451d399e3dfcd915825ed7dd5b 642064 debhelper_14.1.tar.xz
2fcc084a6cd767fe32adab3849f7aabeb338a808 1613524 debhelper_14.1.git.tar.xz
9ed52c70bab211ef02ebb5849d22bc9cdb475454 17484 debhelper_14.1_source.buildinfo
Checksums-Sha256:
2a9d3c6f37817ad06130e45db61803799fc7259713732ad55ec46fd9dcfa270e 2044
debhelper_14.1.dsc
ec62d7c75d800d28e616cd78bd9e704d71cf1e9c4bbb51c485baa1b7f378b590 642064
debhelper_14.1.tar.xz
cb085e7a32888afc51231924e4ead24bffd03eac3c319502d2b7184e33fd13da 1613524
debhelper_14.1.git.tar.xz
7a2b82f6807afd806914416fa13d96c244ea7cf0164bb57928158a5ebd5166a0 17484
debhelper_14.1_source.buildinfo
Files:
356085f88d4f3205350028c2c21bf746 2044 devel optional debhelper_14.1.dsc
a35fdf2b5ca1da8235a37124ce49549f 642064 devel optional debhelper_14.1.tar.xz
57d70539bb4835973253a9efbba2b48d 1613524 devel None debhelper_14.1.git.tar.xz
96c7bb31f10ed205df6bcbd951bd8f43 17484 devel optional
debhelper_14.1_source.buildinfo
Git-Tag-Info: tag=daeeabd3ef8556046d5c50cc3d2b37752e35b9b3
fp=f5e7199aef5e5c67e555873f740d68888365d289
Git-Tag-Tagger: Niels Thykier <[email protected]>
-----BEGIN PGP SIGNATURE-----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=+kxp
-----END PGP SIGNATURE-----
pgphywNDwI2ZO.pgp
Description: PGP signature
--- End Message ---
