Control: reassign -1 usrmerge
On Wed, Aug 26, 2020 at 10:10:49AM -0400, CJ Fearnley wrote:
> Could util-linux be the package installing /usr/bin/su? Let's find out:
>
> $ sudo rm /usr/bin/su
>
> $ sudo dpkg --unpack /var/cache/apt/archives/util-linux_2.33.1-0.1_amd64.deb
> (Reading database ... 166973 files and directories currently installed.)
> Preparing to unpack .../util-linux_2.33.1-0.1_amd64.deb ...
> Unpacking util-linux (2.33.1-0.1) over (2.33.1-0.1) ...
> Processing triggers for mime-support (3.62) ...
> Processing triggers for man-db (2.8.5-2) ...
>
> $ ls -l {/usr,}/bin/su
> -rwsr-xr-x 1 root root 63568 Jan 10 2019 /bin/su
> -rwsr-xr-x 1 root root 63568 Jan 10 2019 /usr/bin/su
>
> Pshew, it is util-linux installing this mysterious setuid binary. I have
> not been hacked. Good. But this is very, very surprising:
No. It's an aspect of the /usr-merge. Your /bin is a symlink to usr/bin.
util-linux install's to /bin/su, which becomes /usr/bin/su due to the
symlink. Not a util-linux problem at all.
Thus reassigning to usrmerge.
Helmut
