[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#283377: RC2 install report on Dell SC420, security issue with network-console udeb "installer" user not being removed



On Sun, 28 Nov 2004 19:06:23 +0100, Frans Pop <aragorn@tiscali.nl> wrote:
> On Sunday 28 November 2004 17:52, Colleen Hatfield wrote:
> > The screen where you set the "installer" user's password says, "This
> > password is used only by the Debian installer, and will be discarded
> > once you finish the installation."  However, this is not the case -
> > this user persists after completion of the install and rebooting, etc.
> 
> There is code that does remove this user at the end of the
> base-configuration stage (base-config) after the reboot.
> 
> I have checked on an installation I did myself using ssh (on an emulated
> s390 IBM Mainframe), and there the installer user is no longer present.

I thought it was pretty weird, so I went ahead and did a second
installation on another partition on the same machine to see if I
could reproduce it.  The only difference between the two installs was
that the first time I didn't use base-config to install any packages,
while the second time I chose the file-server role since it installs
the ssh package, and I wanted to verify that this problem wasn't
triggered by me skipping the "install additional packages" step the
first time.

> This leads me to suspect that something went wrong with your base-config.
> Some questions:
> - did you run base-config over ssh (using the installer user) or did you
>   run it on the system itself?

On the system itself.  I got to the point where it told me to remove
the CD and reboot the system, then I did so.

> - was base-config started automatically or did you run it manually?

It was started automatically.

> - did you complete base-config normally (including the final dialog and
>   final cleanup actions)?

Yes.

> - any other special things you did or noticed that could have caused this?

If you have any ideas, I'll be glad to test them on this machine or
repeat install as necessary.

This is the only thing I've found that looks a little off to me (from
the very end of /var/log/debian-installer/syslog):
Nov 28 09:30:42 prebaseconfig: info: Running
/usr/lib/prebaseconfig.d/70kbd-chooser
Nov 28 09:30:42 prebaseconfig: info: Running
/usr/lib/prebaseconfig.d/80prepare-network-console
Nov 28 09:30:42 prebaseconfig: Installation of network-console-config
into /target failed
Nov 28 09:30:42 prebaseconfig: info: Running
/usr/lib/prebaseconfig.d/90prepare-base-config
Nov 28 09:30:42 prebaseconfig: Configuring /etc/inittab to run
base-config for regular console
Nov 28 09:30:42 prebaseconfig: info: Running
/usr/lib/prebaseconfig.d/93save-install-log
Nov 28 09:30:42 debconf: Setting debconf/priority to low

> - what's the output of 'dpkg -l network-console-config' now?

No packages found matching network-console-config.

Thanks!
- Colleen



Reply to: