[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1055076: marked as done (glibc: wrong _PATH_NOLOGIN in paths.h)

Your message dated Tue, 31 Oct 2023 22:15:54 +0100
with message-id <676149f3-4241-4c4a-8670-c0e1c912c770@app.fastmail.com>
and subject line Re: Bug#1055076: glibc: wrong _PATH_NOLOGIN in paths.h
has caused the Debian Bug report #1055076,
regarding glibc: wrong _PATH_NOLOGIN in paths.h
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1055076: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055076
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: libc6-dev
Source: glibc
Version: 2.38-3
Severity: normal

In /usr/include/paths.h at line 56 we have:

  #define _PATH_NOLOGIN   "/etc/nologin"

This path is incorrect and should be replaced by "/usr/sbin/nologin".

Debian has a patch that could be amended to fix this: https://salsa.debian.org/glibc-team/glibc/-/blob/sid/debian/patches/any/local-fhs-linux-paths.diff

-- 
  Olivier Duclos

--- End Message ---
--- Begin Message --- 
Closing.


On Tue, Oct 31, 2023, at 21:52, Olivier Duclos wrote:
> Woops! I didn't know that. Thanks for the explanation :)
>
> -- 
>   Olivier Duclos
>
> On Tue, Oct 31, 2023, at 20:02, Aurelien Jarno wrote:
>> Hi,
>>
>> On 2023-10-30 22:17, Olivier Duclos wrote:
>>> Package: libc6-dev
>>> Source: glibc
>>> Version: 2.38-3
>>> Severity: normal
>>> 
>>> In /usr/include/paths.h at line 56 we have:
>>> 
>>>   #define _PATH_NOLOGIN   "/etc/nologin"
>>> 
>>> This path is incorrect and should be replaced by "/usr/sbin/nologin".
>>
>> I think you are missing two different things:
>> - The /etc/nologin file that prevent non-root users to log on a
>>   machine if it exists.
>> - The nologin shell that can be used in /etc/passwd to prevent the
>>   corresponding users to login.
>>
>> Changing _PATH_NOLOGIN to "/usr/sbin/nologin", as you suggest, might
>> prevent users to log on there system once packages are rebuild against
>> the changed paths.h as this binary is provided by an essential package
>> present on all systems. "might" because pam does not use the glibc
>> paths.h and hard codes the path instead. But OpenSSH seems to use it.
>>
>> Regards
>> Aurelien
>>
>> -- 
>> Aurelien Jarno                          GPG: 4096R/1DDD8C9B
>> aurelien@aurel32.net                     http://aurel32.net

--- End Message ---
Reply to: