Package: base-passwd
Version: 3.5.49
Severity: normal
X-Debbugs-Cc: [email protected]
Dear Maintainer,
* What led up to the situation?
I did an upgrade from Buster to Bullseye.
* What exactly did you do (or not do) that was effective (or
ineffective)?
I followed the procedure in the Bullseye release notes.
https://www.debian.org/releases/bullseye/amd64/release-notes/ch-upgrading.en.html
* What was the outcome of this action?
The shell for the user backup was changed from bash back to nologin,
the value provided by base-passwd.
I use amanda over ssh. This requires a working shell for the user
backup. So this change broke my amanda environment on this machine.
From the upgrade log:
Preparing to unpack .../base-passwd_3.5.49_amd64.deb ...
Unpacking base-passwd (3.5.49) over (3.5.46) ...
Setting up base-passwd (3.5.49) ...
Changing shell of backup from /bin/bash to /usr/sbin/nologin
You can confirm that update-passwd would do this, given the chance,
by running:
update-passwd --dry-run
--------------------------------------------------
root@iorich:~# update-passwd --dry-run
Changing shell of backup from /bin/bash to /usr/sbin/nologin
Would commit 1 changes
root@iorich:~#
--------------------------------------------------
Workaround is to change the shell back again, e.g.:
chsh -s /bin/bash backup
* What outcome did you expect instead?
The shell for user backup would be left alone, or at least the
upgrade process should prompt for approval.
-- System Information:
Debian Release: bullseye/sid
APT prefers testing-security
APT policy: (500, 'testing-security'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-6-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE not set Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages base-passwd depends on:
ii libc6 2.31-11
ii libdebconfclient0 0.257
Versions of packages base-passwd recommends:
ii debconf [debconf-2.0] 1.5.75
base-passwd suggests no packages.
-- debconf information:
base-passwd/group-change-gid: true
base-passwd/user-change-uid: true
base-passwd/user-change-home: true
base-passwd/user-change-gid: true
base-passwd/group-remove: true
base-passwd/user-move: true
base-passwd/user-change-shell: true
base-passwd/user-add: true
base-passwd/user-change-gecos: true
* base-passwd/system/user/irc/home/_var_run_ircd/_run_ircd: true
base-passwd/group-add: true
base-passwd/system/user/backup/shell/_bin_bash/_usr_sbin_nologin: true
base-passwd/group-move: true
base-passwd/user-remove: true
--
Does anybody read signatures any more?
https://charlescurley.com
https://charlescurley.com/blog/
