Just for the record, Brian brought this up on debian-devel back in March in 
this thread:
  http://lists.debian.org/debian-devel/2010/03/msg00298.html

This is a serious bug in gcrypt/gnutls.  These libraries are modifying
global process state in a very intrusive and unjustified way, in this
case dropping root privs when you do a simple NSS passwd/group database
lookup(!)  This isn't something that can be fixed in schroot; please
could you reassign it to libgcrypt.

I hope that in the future, pam_ldap can use a library other than
gcrypt/gnutls given its severe brokenness and upstream cluelessness.


Regards,
Roger

** Branch linked: lp:ubuntu/libgcrypt11

-- 
Different permission denied errors
https://bugs.launchpad.net/bugs/486944
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to