WARNING: Re: debhelper & /usr/bin/passwd
Good greif. I'm sorry about this snafu. You weren't hit by an exploit
attempt, just by a debhelper package I managed to leave some junk in. This
is fixed in version 1.2.29, and it only affected version 1.2.28.
Background:
Yesterday I fixed a bug in dh_link, bug #23255. That bug concerns a
different package that diverts /usr/bin/{passwd,chsh,chfn}, and needed to
set up some symlinks from "sysdb-wrapper" to them using dh_link. As I tested
dh_link, I created a debian/links file that generated those 3 symlinks. And
then I forgot to remove it and when debhelper built, it happily made the 3
symlinks in the binary package.
I'd say installing debhelper 1.2.28 with --force-conflicts is a _very_ bad
idea. So long as you don't force things dpkg won't let it install all the
way or remove /usr/bin/{passwd,chsh,chfn}. As I said, I've verified that
1.2.29 doesn't have this problem. If you install debhelper 1.2.29 and find
yourself missing /usr/bin/{passwd,chsh,chfn}, you'll have to reinstall
passwd.deb to get them back.
Ossama Othman wrote:
> Hi Mitch,
>
> > Could you please post the version(s) you have and which mirror you
> > got it from?
>
> Sure! chsh and chfn were also in debhelper! I got debhelper using
> dselect/apt. Here is all the info you requested:
>
> % cat /etc/apt/sources.list
> deb http://http.us.debian.org/debian unstable main contrib non-free
> deb http://non-us.debian.org/debian-non-US unstable non-US
>
> % dpkg -l debhelper
> ii debhelper 1.2.28 helper programs for debian/rules
>
> % dpkg --listfiles debhelper | grep /usr/bin/
> /usr/bin/dh_builddeb
> /usr/bin/dh_clean
> /usr/bin/dh_compress
> /usr/bin/dh_du
> /usr/bin/dh_fixperms
> /usr/bin/dh_gencontrol
> /usr/bin/dh_installchangelogs
> /usr/bin/dh_installcron
> /usr/bin/dh_installdeb
> /usr/bin/dh_installdebfiles
> /usr/bin/dh_installdirs
> /usr/bin/dh_installdocs
> /usr/bin/dh_installexamples
> /usr/bin/dh_installinit
> /usr/bin/dh_installmanpages
> /usr/bin/dh_installmenu
> /usr/bin/dh_makeshlibs
> /usr/bin/dh_md5sums
> /usr/bin/dh_movefiles
> /usr/bin/dh_shlibdeps
> /usr/bin/dh_strip
> /usr/bin/dh_suidregister
> /usr/bin/dh_testdir
> /usr/bin/dh_testroot
> /usr/bin/dh_testversion
> /usr/bin/dh_undocumented
> /usr/bin/dh_debstd
> /usr/bin/dh_installemacsen
> /usr/bin/dh_installwm
> /usr/bin/dh_link
> /usr/bin/dh_listpackages
> /usr/bin/passwd
> /usr/bin/chsh
> /usr/bin/chfn
>
> Okay, I think we can be pretty sure the last three entries don't belong
> there. What do you think is the problem?
>
> Thanks,
> -Ossama
> ______________________________________________________________________
> Ossama Othman <othman@cs.wustl.edu>
> 58 60 1A E8 7A 66 F4 44 74 9F 3C D4 EF BF 35 88 1024/8A04D15D 1998/08/26
>
>
> --
> To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
--
see shy jo
Reply to: