shadowconfig uses "pwck -p" and "grpck -p" which aren't actually supported

Bug #828319 reported by Thomas Bushnell, BSG
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
shadow (Debian)
Fix Released
Unknown
shadow (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

/sbin/shadowconfig from the passwd package uses "pwck -p" and "grpck -p". On some other Linux systems, the -p flag to these programs says to silently fix problems found in those files.

But the Ubuntu Lucid versions do not actually do that. The Ubuntu Lucid versions ignore the -p option, and then go ahead and prompt for confirmation before making changes.

This can be dangerous at install time. If the install image has problems in the group or passwd files (for example, mention of an unknown user in the group file), then finish-install's postinst will call 06user-setup, which calls user-setup-apply, which calls shadowconfig. When that prompts for input, the install will hang.

This with passwd version 1:4.1.4.2-1ubuntu2.2, which includes shadowconfig, grpck, and pwck.

Revision history for this message
Thomas Bushnell, BSG (tbushnell) wrote :

[Not sure why launchpad is insisting on labelling this package "shadow", but on lucid it's "passwd".]

Revision history for this message
Thomas Bushnell, BSG (tbushnell) wrote :

Oh, that's the source package name.

This bug is also in the Debian stable version of the package as well.

Revision history for this message
Thomas Bushnell, BSG (tbushnell) wrote :
Changed in shadow (Debian):
importance: Undecided → Unknown
status: New → Unknown
Changed in shadow (Debian):
status: Unknown → New
Changed in shadow (Debian):
status: New → Fix Committed
Changed in shadow (Debian):
status: Fix Committed → Fix Released
Revision history for this message
Mathew Hodson (mhodson) wrote :

This should be fixed in Trusty and later.

Changed in shadow (Ubuntu):
importance: Undecided → Medium
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.