Bug#983405: adduser: race conditions in adduser

[Brent Baccala]

Package: adduser
Version: 3.116ubuntu1
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

A custom designed system service attempted to add several users near-
simultaneously.  I got two users created with the same GID.  One of them had no
home directory.

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

I deleted the users and manually re-added them.

Then I modified the custom service to protect the call to adduser with a POSIX
semaphore.

   * What was the outcome of this action?

I fixed the immediate problem by hand, and I expect that the semaphore will
prevent the same problem for this particular service.

   * What outcome did you expect instead?

adduser should protect itself against these kind of race conditions.

*** End of the template - remove these template lines ***



-- System Information:
Debian Release: buster/sid
  APT prefers bionic-updates
  APT policy: (500, 'bionic-updates'), (500, 'bionic-security'), (500, 
'bionic'), (100, 'bionic-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.15.0-135-generic (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages adduser depends on:
ii  debconf [debconf-2.0]  1.5.66ubuntu1
ii  passwd 1:4.5-1ubuntu2

adduser recommends no packages.

Versions of packages adduser suggests:
ii  ecryptfs-utils  111-0ubuntu5
ii  liblocale-gettext-perl  1.07-3build2
ii  perl5.26.1-6ubuntu0.5

-- debconf information:
  adduser/homedir-permission: true
  adduser/title:

Bug#455688: Bug 455688 appears to be open in 'lenny'

[Brent Baccala]

Hi -

I've just upgraded from Debian 4.0r6 to 5.02 (i386) and I'm seeing the
same gnome-terminal behavior reported here:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=455688

The bug looks like it was traced to libvte9 and then had its status
changed to 'fixed-upstream'.  I don't see any reference here to an
actual fix made to libvte9, so this one might have slipped through the
cracks.

Anyway, please let me know if you're at least aware that this is still
an outstanding issue with the latest stable release.  Thank you.


-bwb

        Brent Baccala
cos...@freesoft.org



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#259460: libraw1394-dev: libraw1394 v1.2.0 uses pkg-config

[Brent Baccala]

Package: libraw1394-dev
Version: 0.10.1-1.1
Followup-For: Bug #259460


libraw1394 version 1.2.0 switches to pkg-config, which should eliminate 
the warning messages from aclocal


-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages libraw1394-dev depends on:
ii  libc6 2.3.6-7GNU C Library: Shared libraries
ii  libc6-dev 2.3.6-7GNU C Library: Development Librari
ii  libraw1394-5  0.10.1-1.1 library for direct access to IEEE 

libraw1394-dev recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]