[Pkg-shadow-devel] [UPDATE] A general summary about the shadow package bugs

[Christian Perrier]

Short bug summary update after 4.0.13-4

We still have 21 bugs left opened for shadow (we closed 2 bugs in
4.0.3-4 but #336321 and #336649 popped in since then)

I've ordered the bugs by attention priority. We need to have some work
happen on the first ones...

WAITING BUGS
------------

#276419: su appends the positional args to the command line

     Our pet bug...:-)
     Still needs someone writing a good and concise explanation
     of the problem, then warn the maintainers of packages we
     know would be affected, as well as send a general warning
     in -devel
     Then give instructions to change these packages behaviour
     with the detailed explanations of Helmut Waitzmann and finally
     apply the proposed patch

UNDER WORK BUGS
---------------

#334803:  login: suspend command from su shell doesn't work again

     Alexander is working on it

#277767:   su segfaults using encrypted LDAP

     Alexander will try to reproduce it but it needs a quite
     complicated setup to do so. Still planned at some
     moment in the future

#332198:   login: unable to determine TTY name, got /dev/pts/1

     We're still trying to figure out whether there is a bug
     or not. Not really clear as the bug is not easy to
     reproduce by the bug submitter

FORWARDED UPSTREAM, NO PATCH PROPOSED
-------------------------------------

#259494: /usr/bin/lastlog: needs option to display users with uid >=
1000

     This seems complicated to fix. Not much activity until now

FORWARDED UPSTREAM WITH PATCH (not applied yet)
-----------------------------

(we can fix them in Debian before upstream but I'd rather have Tomasz opinion)

#190252: vipw should offer a quiet mode and display to stdout
#296729: useradd does not preserve sticky bits on directories from the skeleton
#62821 : vipw should prompt to edit shadow for consisistency
#87648 : libpam-runtime: pam ignores FAIL_DELAY
#187921: login: PAM service for login is fixed.
#190215: login: su should log successful root logins with LOG_NOTICE, like login does
#336649: shadow: [INTL:tl] Updated Tagalog program translation
#333706: useradd lacks -r option
     Disagreement from Tomasz who does not like Redhat choice for LSB
     Proposed patch is a big mess of Redhat changes. Useless as is.
     Christian proposed a patch which needs heavy review


FIXED UPSTREAM (will be fixed in 4.0.14 upload)
-----------------------------------------------

334264: shadow: [INTL:sv] Swedish debconf templates translation
335381: [INTL:uk] Updated Ukrainian program translation (online) 

FIXED ISSUES ?
--------------

295416: userdel should not remove the group which is primary for someone else

      Seems fixed as Tomasz applied one of the two proposed patches
      The other one is maybe not needed

      Still not completely sure of that, though

#336321:  initial-passwd-udeb fails and not ready for testing

     Actually a fake bug to prevent the udeb to enter testing. The bug
     can be closed when needed

WONTFIX BUGS
------------

#311058: login: pam_limits.so in pam.d/su breaks "nice su -c foo bar"

     Here the bug submitter agrees that the bug really belongs to
     libpam-modules and just proposes keeping it "for documentation
     purposes". I'm not fond of this and at some moment, I could
     decide to just close the bug

#47467:  passwd: chfn/chsh should change GECOS/shell through NIS

     Adding this feature, which is anyway a "high level" feature,
     need a full redesign of the NSS functions in the glibc
     There is no important value added to this

     I'll close that one soon

#332911: passwd: Please use the "useful groups" option of adduser when available

     Actually needs a new feature in adduser

#262453: login: su, sudo: Local security hole -- arbitrary character injection

     The bug seems pretty rethorical and not everyone agrees it's
     worth "fixing" it.

     I'll close it soon.