Bug#365598: gdm fails to start gnome, kde (setuid, setgid, root error)

[Wouter Van Hemel]

Package: gdm
Version: 2.14.4-1
Followup-For: Bug #365598

The last GDM upgrade broke Gnome and KDE. Upon logging in, I get errors 
telling me I'm not welcome running as root (setuid/setgid).

The previous message in this report does a good job of describing the 
errors in detail, so I'm going to be my lazy self and not log out and back 
in again to get the exact strings... ;)

Perhaps I should add that I have libpam-ssh installed, although I'm not 
sure it has anything to do with the error, since both logins with a 
regular unix password and logins with a ssh key fail.

Login with ssh key password:

May  1 19:15:35 senta gdm[3268]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost=  user=wouter
May  1 19:15:35 senta gdm[3268]: (pam_unix) session opened for user wouter by (uid=0)
May  1 19:16:19 senta gdm[3268]: (pam_unix) session closed for user wouter

Login with regular unix password:

May  1 21:02:52 senta gdm[4573]: (pam_unix) session opened for user wouter by (uid=0)
May  1 21:03:31 senta gdm[4573]: (pam_unix) session closed for user wouter

Whatever the problem, it's not a very secure situation if it's that easy 
for users to execute commands as root (e.g. my ~/.kde/env/ files are 
executed!).


Regards,

  Wouter

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15
Locale: LANG=C, LC_CTYPE=nl_BE.ISO-8859-15 at euro (charmap=ISO-8859-15)

Versions of packages gdm depends on:
ii  adduser                    3.87          Add and remove users and groups
ii  debconf [debconf-2.0]      1.5.0         Debian configuration management sy
ii  enlightenment [x-window-ma 1:0.16.7.2-3  The Enlightenment Window Manager
ii  gksu                       1.3.7-1       graphical frontend to su
ii  gnome-session              2.14.0-2      The GNOME 2 Session Manager
ii  gnome-terminal [x-terminal 2.14.1-1      The GNOME 2 terminal emulator appl
ii  konsole [x-terminal-emulat 4:3.5.2-2     X terminal emulator for KDE
ii  kwin [x-window-manager]    4:3.5.2-2     the KDE window manager
ii  libart-2.0-2               2.3.17-1      Library of functions for 2D graphi
ii  libatk1.0-0                1.11.4-1      The ATK accessibility toolkit
ii  libattr1                   2.4.32-1      Extended attribute shared library
ii  libc6                      2.3.6-7       GNU C Library: Shared libraries
ii  libcairo2                  1.0.4-2       The Cairo 2D vector graphics libra
ii  libdmx1                    1:1.0.1-3     X11 Distributed Multihead extensio
ii  libfontconfig1             2.3.2-5.1     generic font configuration library
ii  libglade2-0                1:2.5.1-2     library to load .glade files at ru
ii  libglib2.0-0               2.10.2-2      The GLib library of C routines
ii  libgnomecanvas2-0          2.14.0-2      A powerful object-oriented display
ii  libgtk2.0-0                2.8.17-2      The GTK+ graphical user interface 
ii  libpam-modules             0.79-3.1      Pluggable Authentication Modules f
ii  libpam-runtime             0.79-3.1      Runtime support for the PAM librar
ii  libpam0g                   0.79-3.1      Pluggable Authentication Modules l
ii  libpango1.0-0              1.12.1-2      Layout and rendering of internatio
ii  libpopt0                   1.7-5         lib for parsing cmdline parameters
ii  librsvg2-2                 2.14.3-2      SAX-based renderer library for SVG
ii  librsvg2-common            2.14.3-2      SAX-based renderer library for SVG
ii  libselinux1                1.30-1        SELinux shared libraries
ii  libwrap0                   7.6.dbs-9     Wietse Venema's TCP wrappers libra
ii  libx11-6                   2:1.0.0-6     X11 client-side library
ii  libxau6                    1:1.0.0-3     X11 authorisation library
ii  libxcursor1                1.1.5.2-5     X cursor management library
ii  libxdmcp6                  1:1.0.0-4     X11 Display Manager Control Protoc
ii  libxext6                   1:1.0.0-4     X11 miscellaneous extension librar
ii  libxfixes3                 1:3.0.1.2-4   X11 miscellaneous 'fixes' extensio
ii  libxi6                     1:1.0.0-5     X11 Input extension library
ii  libxinerama1               1:1.0.1-4     X11 Xinerama extension library
ii  libxml2                    2.6.24.dfsg-1 GNOME XML library
ii  libxrandr2                 2:1.1.0.2-4   X11 RandR extension library
ii  libxrender1                1:0.9.0.2-4   X Rendering Extension client libra
ii  lsb-base                   3.1-5         Linux Standard Base 3.1 init scrip
ii  metacity [x-window-manager 1:2.14.1-1    A lightweight GTK2 based Window Ma
ii  twm [x-window-manager]     1:1.0.1-3     Tab window manager
ii  xbase-clients              1:7.0.0-5     miscellaneous X clients
ii  xterm [x-terminal-emulator 210-3         X terminal emulator
ii  zlib1g                     1:1.2.3-11    compression library - runtime

Versions of packages gdm recommends:
ii  dialog                    1.0-20060221-1 Displays user-friendly dialog boxe
ii  gdm-themes                0.5            Themes for the GNOME Display Manag
ii  zenity                    2.14.1-1       Display graphical dialog boxes fro

-- debconf information:
  gdm/daemon_name: /usr/bin/gdm
* shared/default-x-display-manager: gdm