On Mon 2018-10-29 12:56:48 -0700, Sunil Mohan Adapa wrote: > Attached the patches do this with /usr/bin/env (better to have full > path?). I have retested all invocations again.
thanks! I've applied your patch on the master branch upstream, and then also changed /usr/bin/env to just "env" -- no reason to be brittle about where "env" is found on the system. We haven't released 0.43 yet, but when we do, this change will be incorporated in it. > I tried this and it looks like this requires more changes and time which > I currently am short on. So, I am not proposing 'env -i' at this time. sounds reasonable to me. > I confirm that I no longer see problems with TMPDIR after removing > libpam-tmpdir from the system. do you think we could just explicitly override TMPDIR as proposed in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=656750#57 to solve that problem on systems where libpam-tmpdir is present? I'd welcome a patch for that too. Maybe that'd be enough to ship a new upstream bugfix release -- or do you have other bugs you want to fix before a release? > From 435f978ac7815b10eae87c82aa7198d6833c4857 Mon Sep 17 00:00:00 2001 > From: Sunil Mohan Adapa <[email protected]> > Date: Sat, 27 Oct 2018 11:00:04 -0700 > Subject: [PATCH] debian: Remove shell for monkeysphere user i applied a variant of this patch on the debian/master branch (with the intent that it will only ship as part of the debian packaging once 0.43 is released. the variant includes a comment encouraging removal of the additional usermod once a debian stable release has been made that forces the shell to nologin. thanks for this work, Sunil! --dkg
signature.asc
Description: PGP signature
