Package: libpam-modules
Version: 1.5.2-6+deb12u1
Severity: minor
X-Debbugs-Cc: deb...@rocketjump.eu

/etc/security/namespace.init has this line:

mask=$(awk '/^UMASK/{gsub("#.*$", "", $2); print $2; exit}' /etc/login.defs)

However, in sid /etc/login.defs does not set UMASK anymore, so mask evaluates to
an empty newline. I haven't looked into where this script is called, so I don't
know if there are security implications.

Greets,
Lee


-- System Information:
Debian Release: 12.8
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990, 
'proposed-updates'), (990, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.11.5+bpo-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libpam-modules depends on:
ii  debconf [debconf-2.0]  1.5.82
ii  libaudit1              1:3.0.9-1
ii  libc6                  2.36-9+deb12u9
ii  libcrypt1              1:4.4.33-2
ii  libdb5.3               5.3.28+dfsg2-1
ii  libpam-modules-bin     1.5.2-6+deb12u1
ii  libpam0g               1.5.2-6+deb12u1
ii  libselinux1            3.4-1+b6

libpam-modules recommends no packages.

libpam-modules suggests no packages.

-- debconf information excluded

Reply via email to