Bug#567572: opencryptoki: root is not added to pkcs11 group

[Jeremy Zimmer <jeremyz@google.com>]

Subject: opencryptoki: root is not added to pkcs11 group

Package: opencryptoki

Version: 2.2.8+dfsg-3

Severity: important

*** Please type your report below this line ***

opencryptoki uses GID rather than EGID to test if the user is allowed to initialize PKCS#11 tokens.

The easiest way to work around is to add root to the pkcs11 group in postinst (directly after the group is created):

adduser root pkcs11

Already filed to Ubuntu: https://bugs.launchpad.net/ubuntu/+source/opencryptoki/+bug/513048

System Information is from an Ubuntu Lucid Alpha 2 installation, but the ubuntu isn't modifying the package, so I'm hoping it can be fixed in debian, and then re-merged into Ubuntu.

-- System Information:

Debian Release: squeeze/sid

  APT prefers lucid-updates

  APT policy: (500, 'lucid-updates'), (500, 'lucid-security'), (500, 'lucid')

Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-11-generic (SMP w/2 CPU cores)

Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)

Shell: /bin/sh linked to /bin/dash

Versions of packages opencryptoki depends on:

ii  adduser                  3.112ubuntu1    add and remove users and groups

ii  libc6                    2.11.1-0ubuntu1 Embedded GNU C Library: Shared lib

ii  libopencryptoki0         2.2.8+dfsg-3    PKCS#11 implementation for Linux (

opencryptoki recommends no packages.

opencryptoki suggests no packages.

-- no debconf information

-- 
Jeremy Zimmer
IT Field Technician
Google