[Pkg-shadow-devel] Bug#472986: [SPAM?] Re: Bug#472986: /bin/su: su segfaults with libpam-p11 activated in /etc/pam.d/common-auth

[Nicolas François]

reassign 472986 libpam-p11
retitle 472986 libpam-p11 should use pam_syslog for logging instead of openlog/syslog/closelog
notfound 472986 1:4.1.0-2
found 472986 0.1.3-1
thanks


Hello,

libpam-p11 uses openlog/syslog/closelog sequences.

The closelog calls will break applications if they wish to report logs
after calling pam functions.

In the case of the original segfault in su, the issue was caused by
openlog. I don't really understand why it is problematic to openlog()
twice, but the attached patch fixed the segfault is su.

pam_syslog will also make the syslog message look prettier (it will
mention the service, not only the name of the module).

Best Regards,
-- 
Nekral
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libpam-p11_no_openlog.patch
Type: text/x-diff
Size: 6204 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20080415/aa6985f1/attachment.patch