Package: libsss-sudo
Version: 1.16.2-1
Severity: serious
Justification: policy violation (section 10.7.3)
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu cosmic

Steps to reproduce:

1. apt install sssd
2. Edit /etc/nsswitch.conf and remove "sss" from the "sudoers" entry
3. apt install --reinstall libsss-sudo

Expected behaviour:

"sss" remains not present in /etc/nsswitch.conf (ie. the local change is
preserved).

Actual behaviour:

"sss" is re-added to nsswitch.conf.

I have verified this behaviour in a Debian sid container today.

Policy violation:

This breaks "local changes must be preserved during a package upgrade"
from policy section 10.7.3.

Suggested fix:

Make the change only on fresh install of the package, rather than on
upgrade.

Additional information:

You might be interested to know that the reason users are hitting this
is that they are trying to work around a different bug that is reported
downstream here:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1249777. But the
workaround gets removed on upgrade.

Thanks,

Robie

Attachment: signature.asc
Description: PGP signature

Reply via email to