s390-tools: missing ts-shell
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu on IBM z Systems |
Fix Released
|
Medium
|
Unassigned | ||
s390-tools (Ubuntu) |
Fix Released
|
Medium
|
Dimitri John Ledkov | ||
Xenial |
Fix Released
|
Medium
|
Unassigned |
Bug Description
[Impact]
* /var/log/ts-shell has wrong permissions, and thus prevents ts-shell operation.
[Test Case]
* /var/log/ts-shell should be:
drwxrws--T 2 root ts-shell
==
s390-tools: missing ts-shell
ts-shell is part of the s390-tools package (see here http://
ts-shell is a terminal server shell to authorize and control IUCV terminal connections for individual Linux users. It is currently still missing in the Ubuntu Beta version (4.4.0-15-generic #31-Ubuntu SMP Fri Mar 18 19:07:12 UTC 2016 s390x).
The preferred integration of ts-shell is through a subpackage. The ts-shell is required on a particular Linux instance only, that it is the terminal server. Other Linux instances might not need to install ts-shell.
Apart from the installing ts-shell, further configuration files and steps are required:
1. Install and package these configuration files:
/etc/iucvterm/
/etc/iucvterm/
/etc/iucvterm/
/etc/iucvterm/
2. Install additional documentation files for the ts-shell, that are included in the "iucvterm/
3. System configuration for ts-shell.
- (optional) Register ts-shell as shell by adding it to /etc/shells.
- Create a ts-shell group.
- Ensure the configuration files from 1. are readable by the ts-shell group.
- Create the /var/log/ts-shell directory to store audit logs; the ts-shell group should have read/write access to this directory, implemented as set-group-ID
4. Optional. The ts-shell subpackage must depend on s390-tools because it requires iucvconn. Further, the subpackage should add a Recommends to either Term::ReadLine::Gnu or Term::ReadLine:
Below is an excpert from the README.ts-shell to create ts-shell user accounts. These information should help to better understand the configuration steps above:
Setup considerations for the terminal server shell (ts-shell)
-------
Adding new ts-shell users
~~~~~~~
The ts-shell installation creates a system group ts-shell.
If you intend to use ts-shell as a login shell for users, ensure that
these users are all members of ts-shell. To add existing users to
group ts-shell, use +usermod -G ts-shell 'username'+.
The ts-shell configuration files and `/var/log/ts-shell` are
readable only by members of the *ts-shell* group.
Enabling terminal session transcripts
~~~~~~~
ts-shell(1) can be configured to create transcripts of terminal sessions
to particular z/VM guest virtual machines. The transcripts are written
to log files in the `/var/log/ts-shell` directory.
NOTE: The `/var/log/ts-shell` directory permission has the
different users will inherit the group ownership of the
See the ts-shell(1) manual page for more information about terminal
session transcripts.
For further details, see http://
tags: | added: architecture-s39064 bugnameltc-139838 severity-medium targetmilestone-inin1604 |
Changed in ubuntu: | |
assignee: | nobody → Skipper Bug Screeners (skipper-screen-team) |
affects: | ubuntu → s390-tools (Ubuntu) |
Changed in ubuntu-z-systems: | |
status: | In Progress → Fix Committed |
Changed in ubuntu-z-systems: | |
status: | Fix Committed → Fix Released |
Changed in ubuntu-z-systems: | |
importance: | Undecided → Medium |
Changed in s390-tools (Ubuntu): | |
status: | Triaged → In Progress |
Changed in s390-tools (Ubuntu Xenial): | |
status: | New → In Progress |
Changed in s390-tools (Ubuntu): | |
importance: | Undecided → Medium |
Changed in s390-tools (Ubuntu Xenial): | |
importance: | Undecided → Medium |
Changed in ubuntu-z-systems: | |
status: | Triaged → In Progress |
description: | updated |
Changed in ubuntu-z-systems: | |
status: | In Progress → Fix Committed |
Changed in ubuntu-z-systems: | |
status: | Fix Committed → Fix Released |
Hello,
When filing bug reports against a package, please include the version of the package. E.g. most of the requested things are provided in s390-tools package since 1.34.0-0ubuntu3, which was released a day before this bug was filed.
So the missing bits I think are just these postinst stanzas: *.conf *.conf
if ! getent group ts-shell >/dev/null; then
addgroup --system ts-shell
fi
chown root:ts-shell /etc/iucvterm/
chmod 0640 /etc/iucvterm/
mkdir -p 3770 /var/log/ts-shell
chmod g+s /var/log/ts-shell
chgrp -R ts-shell /var/log/ts-shell >/dev/null 2>&1 || true
chmod 0660 /var/log/ts-shell/* >/dev/null 2>&1 || true
I shall add them to the package, and then I think this bug report will be complete. This will not register ts-shell in /etc/shells.
Hopefully the above postinst commands are all correct and sufficient for ts-shell integration on Ubuntu.