tags 381695 + fixed-upstream pending thanks Helge Kreutzmann <[EMAIL PROTECTED]> writes:
>> The reason why the logging is performed is because the schroot service >> may be used to gain root access (even without a password, if so >> configured; see root-users and root-groups in schroot.conf(5) and >> switch users. As a result, the commands being run are logged, just as >> they are with the su and sudo commands (schroot is implementing their >> functionality). >> >> The attached patch will log the command or shell if: >> >> * running as root >> * switching to root >> * switching to another user >> >> But will not log if >> >> * the user is the same (not switching) and is not root >> >> Is this acceptable? When running as root, or switching to another >> user, there are security concerns which make logging advisable. > > Yes. Super. I have committed the patch into SVN. > Thanks for your speedy reply and quick fix! You're welcome. The fix will be released with schroot-1.0.2. I'll release this in about a week (I would like 1.0.1-1 to propagate to testing first, seeing as this bug is not an urgent issue); until then, the patch to sbuild/sbuild-session.cc will apply to earlier releases as well, should you wish to do that. Thanks for reporting this. Regards, Roger -- .''`. Roger Leigh : :' : Debian GNU/Linux http://people.debian.org/~rleigh/ `. `' Printing on GNU/Linux? http://gutenprint.sourceforge.net/ `- GPG Public Key: 0x25BFB848 Please sign and encrypt your mail.
pgpI7xRmnDyeD.pgp
Description: PGP signature
