Hi Marc, On Mi 16 Sep 2026 13:40:01 CEST, Marc Haber wrote:
On Tue, Sep 08, 2026 at 09:16:14PM +0000, Mike Gabriel wrote:* you add a debian/sudo.nss file into the sudo src:pkg with the following content:``` sudoers database-add sudoers first files ```Doing this and installing the resulting package causes nsswitch.conf to grow a line"sudoers:" with nothing after the colon. Is that the indended result?
I can confirm your observation when upgrading from 1.9.17p2-8 to my patched version:
``` diff -Nru sudo-1.9.17p2/debian/changelog sudo-1.9.17p2/debian/changelog --- sudo-1.9.17p2/debian/changelog 2026-09-08 14:22:41.000000000 +0000 +++ sudo-1.9.17p2/debian/changelog 2026-09-09 20:32:38.000000000 +0000 @@ -1,3 +1,10 @@ +sudo (1.9.17p2-9~sunweaver1) UNRELEASED; urgency=medium + + * debian/sudo.nss: + + Authoritatively manage sudoers: entry in nsswitch.conf. + + -- <locadm@libsss-sudo-1129522> Wed, 09 Sep 2026 20:32:38 +0000 + sudo (1.9.17p2-8) unstable; urgency=medium * Mention in NEWS that secure_path was shortened (Closes: #1141402) diff -Nru sudo-1.9.17p2/debian/sudo.nss sudo-1.9.17p2/debian/sudo.nss --- sudo-1.9.17p2/debian/sudo.nss 1970-01-01 00:00:00.000000000 +0000 +++ sudo-1.9.17p2/debian/sudo.nss 2026-09-09 20:32:38.000000000 +0000 @@ -0,0 +1,3 @@ +sudoers database-add + +sudoers first files ``` When purging sudo and installing anew, the nsswitch.conf looks good. This probably means there is something wrong with dh-nss. .o( #!$?(%§$%§ ) Taking a closer look. Mike -- mike gabriel aka sunweaver (Debian Developer) mobile: +49 (1520) 1976 148 landline: +49 (4351) 486 14 27 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: [email protected], http://sunweavers.net
pgpq989kZbxs_.pgp
Description: Digitale PGP-Signatur
