Checksecurity will not check for duplicate root accounts

[elfrinjo]

# OS & package versions
Ubuntu 20.04 2.0.16+nmu1ubuntu1
Ubuntu 22.04 2.0.16+nmu3ubuntu1
Ubuntu 24.04 2.0.16+nmu4ubuntu1

# What you expected to happen
Checksecurity should warn about duplicate users with id == 0

# What happened instead
It does not

# Reason
/etc/checksecurity/check-passwd.conf sets CHECK_PASSWORD_WARN_UIDS="TRUE" to activate this warning.

/usr/share/checksecurity/check-passwd tests for "x$CHECK_PASSWORD_DUPLICATES" = "xTRUE" on whether to enable the test.

[Lucas Kanashiro (lucaskanashiro)]

Thanks for the bug report and for helping to improve Ubuntu.

I tried to fix this issue with the package available in this PPA (only available for 24.04 noble):

https://launchpad.net/~lucaskanashiro/+archive/ubuntu/checksecurity-fix

Could you please test it and let me know if everything is looking good?

This package is kind of unmaintained for many years in Debian, ideally we should upload this fix there, fix the Ubuntu development release (oracular) by syncing it, and then SRU the fix to stable releases.

[elfrinjo (elfrinjo)]

Hi Lucas, this works as expectedt, thanks!