On Sun, Mar 08, 2009 at 06:19:35PM -0700, Bill Barry wrote:
> I had this exact same thing occur to me yesterday.   I first noticed it when
> su took me directly to root.
> Having seen this thread, I went though the backups for the last few days and
> noticed that several files in /etc/pam.d had been updated during a normal
> debian upgrade. The files were
> etc/pam.d/common-account
> etc/pam.d/common-auth
> etc/pam.d/common-password
> etc/pam.d/common-session
> 
> I restored these files from the backup and the problem disappeared. As far
> as I can tell this was not caused by any malice, but was caused by a
> packaging problem.

packaging problem or compromised package?
Coming from the package does not rule out malice. 

Your post had me immediately bounce around to all my machines and verify that 
I'd be prompted for a password for su.

-- 
      Michael Rasmussen, Portland Oregon  
    Be appropriate && Follow your curiosity
          http://www.jamhome.us/
  The fortune cookie says:
Whenever the literary German dives into a sentence, that is the last
you are going to see of him until he emerges on the other side of his
Atlantic with his verb in his mouth.
                -- Mark Twain "A Connecticut Yankee in King Arthur's Court"

_______________________________________________
PLUG mailing list
[email protected]
http://lists.pdxlinux.org/mailman/listinfo/plug

Reply via email to