Bug#991113: libpam-chroot: pam_chroot.so installed in wrong place - Not able to login after upgrade

[M. Buecher]

The pam-chroot source code from Ed Schmollinger is currently at: 
https://github.com/gpjt/pam-chroot


Maybe he is willing to create an GitHub Organization and add you as a 
developer.

Or he even is willing switch to Salsa.

Kind regards
Matthias "Maddes" Bücher

Bug#991113: libpam-chroot: pam_chroot.so installed in wrong place - Not able to login after upgrade

[Javier Fernandez-Sanguino]

Dear Michael,

Thanks for the proposed patch. I will try to review and submit a new
package version is the coming days.

Saludos,

Javier

El mié, 8 jun 2022 20:45, M. Buecher  escribió:

> I had a look at the package source and only the paths in the file
> debian/rules [1] have to be changed.
> Extend all `lib/$(DEB_HOST_MULTIARCH)` to
> `lib/$(DEB_HOST_MULTIARCH)/security` (added suffix `/security`).
>
> [1] https://sources.debian.org/src/libpam-chroot/0.9-5/debian/rules/
>
> Here the changed lines I tested successfully:
>
> ```
>  mkdir -p
> $(CURDIR)/debian/libpam-chroot/lib/$(DEB_HOST_MULTIARCH)/security
>  # Add here commands to install the package into debian/libpam-chroot
>  $(MAKE) install DESTDIR=$(CURDIR)/debian/libpam-chroot
> LIBDIR=$(CURDIR)/debian/libpam-chroot/lib/$(DEB_HOST_MULTIARCH)/security
> INSTALL="install --strip-program=true"
> ```
>
> Enable source repositories, install build tools and dependencies, then
> build and install:
>
> ```
> nano /etc/apt/sources.list
> apt-get update
> apt-get install devscripts build-essential
> cd /var/tmp
> apt-get build-dep libpam-chroot
> apt-get source libpam-chroot
> cd libpam-chroot-0.9*/
> sed -i -e 's#lib/\$(DEB_HOST_MULTIARCH)\(
> \|$\)#lib/\$(DEB_HOST_MULTIARCH\)/security\1#' debian/rules
> debuild -us -uc
> #
> cd /var/tmp
> dpkg -i libpam-chroot_0.9*.deb
> ```
>

Bug#991113: libpam-chroot: pam_chroot.so installed in wrong place - Not able to login after upgrade

[M. Buecher]

I had a look at the package source and only the paths in the file 
debian/rules [1] have to be changed.
Extend all `lib/$(DEB_HOST_MULTIARCH)` to 
`lib/$(DEB_HOST_MULTIARCH)/security` (added suffix `/security`).


[1] https://sources.debian.org/src/libpam-chroot/0.9-5/debian/rules/

Here the changed lines I tested successfully:

```
    mkdir -p 
$(CURDIR)/debian/libpam-chroot/lib/$(DEB_HOST_MULTIARCH)/security

    # Add here commands to install the package into debian/libpam-chroot
    $(MAKE) install DESTDIR=$(CURDIR)/debian/libpam-chroot 
LIBDIR=$(CURDIR)/debian/libpam-chroot/lib/$(DEB_HOST_MULTIARCH)/security 
INSTALL="install --strip-program=true"

```

Enable source repositories, install build tools and dependencies, then 
build and install:


```
nano /etc/apt/sources.list
apt-get update
apt-get install devscripts build-essential
cd /var/tmp
apt-get build-dep libpam-chroot
apt-get source libpam-chroot
cd libpam-chroot-0.9*/
sed -i -e 's#lib/\$(DEB_HOST_MULTIARCH)\( 
\|$\)#lib/\$(DEB_HOST_MULTIARCH\)/security\1#' debian/rules

debuild -us -uc
#
cd /var/tmp
dpkg -i libpam-chroot_0.9*.deb
```

Bug#991113: libpam-chroot: pam_chroot.so installed in wrong place - Not able to login after upgrade

[M. Buecher]

Package: libpam-chroot
Version: 0.9-5
Followup-For: Bug #991113
X-Debbugs-Cc: maddes+deb...@maddes.net

Dear Maintainer,

the library pam_chroot.so is installed in the wrong location, therefore it 
cannot be loaded.
This prevents anyone (incl. root) to log into systems that require that module.
Changed the pam module to optional via a live linux and found an error message 
in auth.log:
```
Jun  8 19:30:16 test-debian11 sshd[459]: PAM unable to dlopen(pam_chroot.so): 
/lib/security/pam_chroot.so: cannot open shared object file: No such file or 
directory
Jun  8 19:30:16 test-debian11 sshd[459]: PAM adding faulty module: pam_chroot.so
```

Current wrong location: `/usr/lib/x86_64-linux-gnu/pam_chroot.so`
Correct location: /lib/security/pam_chroot.so -> 
/usr/lib/x86_64-linux-gnu/security/

Workaround:
Boot from a live linux system and move/copy/link file to correct location.
`ln -v -s -r -t /usr/lib/x86_64-linux-gnu/security/ 
/usr/lib/x86_64-linux-gnu/pam_chroot.so`

-- System Information:
Debian Release: 11.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-14-amd64 (SMP w/1 CPU thread)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libpam-chroot depends on:
ii  libc6 2.31-13+deb11u3
ii  libpam0g  1.4.0-9+deb11u1

libpam-chroot recommends no packages.

libpam-chroot suggests no packages.

-- no debconf information