| 2020-01-24 23:45:13 |
Seth Arnold |
bug |
|
|
added bug |
| 2020-01-25 00:07:40 |
Seth Arnold |
tags |
amd64 apport-bug focal |
amd64 apport-bug champagne focal |
|
| 2020-01-27 16:25:51 |
Sebastien Bacher |
pam (Ubuntu): importance |
Undecided |
Low |
|
| 2020-01-27 16:25:51 |
Sebastien Bacher |
pam (Ubuntu): status |
New |
Confirmed |
|
| 2020-01-27 16:25:51 |
Sebastien Bacher |
pam (Ubuntu): assignee |
|
Balint Reczey (rbalint) |
|
| 2020-01-27 16:32:08 |
Balint Reczey |
bug watch added |
|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674857 |
|
| 2020-01-27 16:32:08 |
Balint Reczey |
bug task added |
|
pam (Debian) |
|
| 2020-01-27 16:33:30 |
Balint Reczey |
pam (Ubuntu): assignee |
Balint Reczey (rbalint) |
|
|
| 2020-01-27 16:45:02 |
Balint Reczey |
bug watch added |
|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=936071 |
|
| 2020-01-27 16:45:02 |
Balint Reczey |
pam (Debian): remote watch |
Debian Bug tracker #674857 |
Debian Bug tracker #936071 |
|
| 2020-01-28 00:04:34 |
Bug Watch Updater |
pam (Debian): status |
Unknown |
New |
|
| 2020-03-30 09:19:05 |
sergiu apetroaei |
bug |
|
|
added subscriber sergiu apetroaei |
| 2020-05-13 18:04:01 |
Kai Kasurinen |
bug |
|
|
added subscriber Kai Kasurinen |
| 2020-05-14 15:16:05 |
Brian Murray |
nominated for series |
|
Ubuntu Groovy |
|
| 2020-05-14 15:16:05 |
Brian Murray |
bug task added |
|
pam (Ubuntu Groovy) |
|
| 2020-05-15 12:40:48 |
Francis Ginther |
tags |
amd64 apport-bug champagne focal |
amd64 apport-bug champagne focal id-5ebd60b9e10a724ad7cbaffe |
|
| 2020-05-18 11:00:34 |
Craig Francis |
bug |
|
|
added subscriber Craig Francis |
| 2020-05-21 09:22:35 |
Oliver Mueller |
bug |
|
|
added subscriber Oliver Mueller |
| 2020-05-21 14:53:03 |
Brian Murray |
tags |
amd64 apport-bug champagne focal id-5ebd60b9e10a724ad7cbaffe |
amd64 apport-bug focal id-5ebd60b9e10a724ad7cbaffe |
|
| 2020-05-23 21:25:51 |
Francesco Minnocci |
bug watch added |
|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931899 |
|
| 2020-05-27 14:29:50 |
lupa |
bug |
|
|
added subscriber lupa |
| 2020-06-22 12:30:13 |
Simon Déziel |
bug |
|
|
added subscriber Simon Déziel |
| 2020-07-04 22:39:28 |
Serghei Iakovlev |
bug |
|
|
added subscriber Serghei Iakovlev |
| 2020-07-05 12:03:09 |
Jani Uusitalo |
bug |
|
|
added subscriber Jani Uusitalo |
| 2020-08-04 06:24:16 |
Alexander Fieroch |
bug |
|
|
added subscriber Alexander Fieroch |
| 2020-08-16 13:05:16 |
deadite66 |
bug |
|
|
added subscriber deadite66 |
| 2020-08-26 09:08:27 |
Felix Eckhofer |
bug |
|
|
added subscriber Felix Eckhofer |
| 2020-09-29 19:38:10 |
Matthew Newton |
bug |
|
|
added subscriber Matthew Newton |
| 2020-10-02 18:07:25 |
Nicola Soranzo |
bug |
|
|
added subscriber Nicola Soranzo |
| 2020-10-12 15:05:15 |
Kartik Subbarao |
bug |
|
|
added subscriber Kartik Subbarao |
| 2020-10-13 09:08:47 |
Mario Emmenlauer |
bug |
|
|
added subscriber Mario Emmenlauer |
| 2020-10-14 15:48:49 |
Matthieu Clemenceau |
tags |
amd64 apport-bug focal id-5ebd60b9e10a724ad7cbaffe |
amd64 apport-bug focal fr-14 id-5ebd60b9e10a724ad7cbaffe |
|
| 2020-10-23 16:23:28 |
Tero Gusto |
bug |
|
|
added subscriber Tero Gusto |
| 2020-11-10 18:16:42 |
daincredibleholg |
bug |
|
|
added subscriber daincredibleholg |
| 2020-11-29 09:02:34 |
Jaume |
bug |
|
|
added subscriber Jaume |
| 2020-12-23 02:13:33 |
Gao Shichao |
bug |
|
|
added subscriber Gao Shichao |
| 2021-01-12 20:31:14 |
Marcin |
bug |
|
|
added subscriber Marcin |
| 2021-01-16 13:43:44 |
Germonda |
bug |
|
|
added subscriber Germonda |
| 2021-02-12 01:46:05 |
Harsha Hegde |
bug |
|
|
added subscriber Harsha Hegde |
| 2021-02-12 21:59:53 |
Jim Campbell |
bug |
|
|
added subscriber Jim Campbell |
| 2021-02-15 11:26:19 |
Tuomas Suutari |
bug |
|
|
added subscriber Tuomas Suutari |
| 2021-02-25 23:07:36 |
Bug Watch Updater |
pam (Debian): status |
New |
Fix Released |
|
| 2021-02-26 17:09:49 |
David Ward |
bug |
|
|
added subscriber David Ward |
| 2021-02-28 22:24:32 |
Robie Basak |
nominated for series |
|
Ubuntu Focal |
|
| 2021-02-28 22:24:32 |
Robie Basak |
bug task added |
|
pam (Ubuntu Focal) |
|
| 2021-03-13 23:37:57 |
David Ward |
pam (Ubuntu Focal): status |
New |
Confirmed |
|
| 2021-03-27 06:17:36 |
Dave The Happy Singer |
bug |
|
|
added subscriber Dave The Happy Singer |
| 2021-04-02 14:12:47 |
Mike Fones |
bug |
|
|
added subscriber Mike Fones |
| 2021-04-23 10:14:36 |
Rainer Plischke |
bug |
|
|
added subscriber Rainer Plischke |
| 2021-06-20 15:54:27 |
Chad Jannusch |
bug |
|
|
added subscriber Chad Jannusch |
| 2021-09-16 06:24:06 |
Steve Langasek |
pam (Ubuntu Groovy): status |
Confirmed |
Won't Fix |
|
| 2021-09-16 06:24:10 |
Steve Langasek |
pam (Ubuntu): status |
Confirmed |
Fix Committed |
|
| 2021-09-16 19:33:44 |
Launchpad Janitor |
pam (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2021-09-20 15:18:48 |
Steve Langasek |
pam (Ubuntu Focal): status |
Confirmed |
In Progress |
|
| 2021-09-20 15:43:20 |
Steve Langasek |
description |
Hello, after upgrading to focal I found the following in my journalctl output:
Jan 24 23:07:00 millbarge sudo[32120]: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory
Jan 24 23:07:01 millbarge sudo[32120]: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory
The login package stopped packaging this file:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731656
and now forcibly removes the file:
https://paste.ubuntu.com/p/myh9cGWrHD/
However, the pam package's pam_unix.so module has not yet been adapted to ignore this file:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674857#25
Thanks
ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: libpam-modules 1.3.1-5ubuntu4
ProcVersionSignature: Ubuntu 5.4.0-9.12-generic 5.4.3
Uname: Linux 5.4.0-9-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.11-0ubuntu15
Architecture: amd64
Date: Fri Jan 24 23:35:33 2020
ProcEnviron:
TERM=rxvt-unicode-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: pam
UpgradeStatus: Upgraded to focal on 2020-01-24 (0 days ago) |
[Impact]
Removal of the /etc/securetty file from the system results in useless log messages whenever pam_unix is invoked, which for some systems is quite a lot of logging. /etc/securetty is not coming back, and this is not an error.
[Test Plan]
1. Run 'sudo -s'. Confirm that 'journalctl | grep sudo.*securetty' returns a line 'sudo[...]: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory'.
2. Install libpam-modules update from -proposed.
3. Confirm that 'grep nullok_secure' /etc/pam.d/common-auth returns no lines.
4. Run 'sudo -k'.
5. Run 'sudo -s' again.
6. Confirm that sudo succeeds and gives you a root shell.
7. Confirm that 'journalctl | grep sudo.*securetty' does not show any new lines.
[Where problems could occur]
PAM is a sensitive package because it's used in all authentication operations on the system. A bug here could render a user unable to log in to their system.
Risks are mitigated by:
- including a patch that treats the obsolete 'nullok_secure' as an alias for 'nullok' to ensure any user-edited configurations continue to work rather than throwing errors about unknown options
- editing the system-managed /etc/pam.d/common-auth config to use 'nullok' instead of 'nullok_secure' for future compatibility.
Because we are editing the system config, this could also cause issues on future upgrades with undesirable prompts to the user. However, the maintainer scripts are not meant to prompt on changes to the pam-config, and this code has been in Debian for a while with no reports of problems.
[Original description]
Hello, after upgrading to focal I found the following in my journalctl output:
Jan 24 23:07:00 millbarge sudo[32120]: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory
Jan 24 23:07:01 millbarge sudo[32120]: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory
The login package stopped packaging this file:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731656
and now forcibly removes the file:
https://paste.ubuntu.com/p/myh9cGWrHD/
However, the pam package's pam_unix.so module has not yet been adapted to ignore this file:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674857#25
Thanks
ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: libpam-modules 1.3.1-5ubuntu4
ProcVersionSignature: Ubuntu 5.4.0-9.12-generic 5.4.3
Uname: Linux 5.4.0-9-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.11-0ubuntu15
Architecture: amd64
Date: Fri Jan 24 23:35:33 2020
ProcEnviron:
TERM=rxvt-unicode-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: pam
UpgradeStatus: Upgraded to focal on 2020-01-24 (0 days ago) |
|
| 2021-09-26 22:59:53 |
Harm van Bakel |
bug |
|
|
added subscriber Harm van Bakel |
| 2021-09-28 16:35:19 |
Brian Murray |
pam (Ubuntu Focal): status |
In Progress |
Fix Committed |
|
| 2021-09-28 16:35:22 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2021-09-28 16:35:25 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2021-09-28 16:35:40 |
Brian Murray |
tags |
amd64 apport-bug focal fr-14 id-5ebd60b9e10a724ad7cbaffe |
amd64 apport-bug focal fr-14 id-5ebd60b9e10a724ad7cbaffe verification-needed verification-needed-focal |
|
| 2021-09-28 19:16:15 |
Simon Déziel |
tags |
amd64 apport-bug focal fr-14 id-5ebd60b9e10a724ad7cbaffe verification-needed verification-needed-focal |
amd64 apport-bug focal fr-14 id-5ebd60b9e10a724ad7cbaffe verification-done verification-done-focal |
|
| 2021-09-30 17:04:18 |
Mathew Hodson |
bug watch removed |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931899 |
|
|
| 2021-09-30 17:06:08 |
Mathew Hodson |
bug watch removed |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674857 |
|
|
| 2021-09-30 17:07:52 |
Mathew Hodson |
pam (Ubuntu Focal): importance |
Undecided |
Low |
|
| 2021-10-05 22:05:11 |
Brian Murray |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2021-10-05 23:03:28 |
Launchpad Janitor |
pam (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
