On Mon, Jun 15, 2026 at 10:41:15AM +0200, Chris Hofstaedtler wrote:
> On Sun, Jun 14, 2026 at 07:31:07PM -0300, Adilson dos Santos Dantas wrote:
> > After upgrading util-linux to 2.42.1-4 it was impossible to use su.
> 
> util-linux 2.42.1-4 switched to debhelper compat v14, which puts the 
> PAM files into /usr/lib/pam.d.
> 
> > I got a "Permission denied" message, which makes it impossible to go to the
> > root shell.

In my own testing, only `su -` is broken. A plain `su` works.

>From what I can tell this is because `su -` uses the PAM config for 
`su-l`, which does stuff like `auth include su`. This 
include-variant is broken in the current libpam0g.

  cat /usr/lib/pam.d/su-l
  #%PAM-1.0
  auth          include         su
  account               include         su
  password      include         su
  session               optional        pam_keyinit.so force revoke
  session               include         su

Workaround for su users in the meantime: use `su`, not `su -`.

Chris

Reply via email to