Comment 8 for bug 13242

Message-Id: <email address hidden>
Date: Thu, 24 Feb 2005 16:50:20 +0100
From: Olivier Trichet <email address hidden>
To: <email address hidden>
Subject: John: deletion of /etc/shadow [was Re: Bug John, suppression de /etc/shadow]

> Package: John
>
> Apres une mise a jour du package John il y a environ 4 jours,
> mon /etc/shadow etait supprime toutes les nuits.
> John etait dans la cron afin de verifier toutes les nuits
> les mots de passes des utilisateurs, et lors de son demarrage,
> il supprimais directement les fichiers /etc/shadow* et quittais.
>
After an update of john's package 4 days ago, my /etc/shadow file was
deleted each night. John was in the cron in order to check users'
password each night, but on startup it deleted all /etc/shadow* file and
exited.

> Mon fichier de conf :
my configuration file:

> #cat /etc/john/john-mail.conf
>
> # These are the shells that should be ignored by john. If you
> # install falselogin, for example, you may want to add it to
> # the list.
> shells=-,/bin/false,/dev/null,/bin/sync
>
> # This is the mail command. You may actually use any program
> # here; the message in /etc/john.msg will be piped into it,
> # with the login name and host name substituted.
> # You may want to use a program to log information about
> # weak passwords (but that means sensitive information would be
> # kept somewhere - be careful!)
> mailcmd=/usr/sbin/sendmail
>
> # This is the passfile, which defines a temporary file that
> contains # the content of /etc/passwd and /etc/shadow while the cronjob
> is run. # Since this file contains sensible data, no default is
> provided and # you need to specify a file name to be used."
> passfile=/etc/shadow
>
> Un # de la derniere ligne a reussit a supprimer le probleme.
> Le package est desinstalle.

Commenting out the last line solved the problem.
The package is removed.