Package: ecryptfs-utils
Version: 71-1
Severity: normal

As I see /usr/share/doc/ecryptfs-utils/ecryptfs-pam-doc.txt.gz ,
/etc/pam.d/system-auth is mentioned. I do not see such file in Debian
nor in Ubuntu.  What is going on?  Is this meant to be
/etc/pam.d/common-auth?

Then /usr/share/doc/ecryptfs-utils/ecryptfs-pam-doc.txt.gz states:

> The following line needs to be added to /etc/pam.d/system-auth,
> immediately below the line referencing the pam_unix.so module in the
> auth context:
> 
> auth       required     pam_ecryptfs.so unwrap

If /etc/pam.d/system-auth is /etc/pam.d/common-auth, line referencing the
pam_unix.so module and following active lines are:

> auth    [success=1 default=ignore]      pam_unix.so nullok_secure
> auth    requisite                       pam_deny.so
> auth    required                        pam_permit.so

Clearly, immediately below the line referencing the pam_unix.so module is wrong
place to put it.  I suppose it should be between pam_deny.so and pam_permit.so.

Back to /usr/share/doc/ecryptfs-utils/ecryptfs-pam-doc.txt.gz states:

> The following line needs to be added to /etc/pam.d/system-auth,
> immediately above the line referencing the pam_unix.so module in the
> password context:
>
> password   required     pam_ecryptfs.so

I guess you mean /etc/pam.d/common-password.  Also I can mount it without
having fstab file as described.

Besides, what pam_ecryptfs(8) ask to add:

/etc/pam.d/common-auth:
    auth    required        pam_ecryptfs.so unwrap

/etc/pam.d/common-session:
    session optional        pam_ecryptfs.so unwrap

The ecryptfs-pam-doc.txt.gz seems to be not in synch with this description and
manpage is unclear about where to put this new lines.  Please update this
document.

Osamu


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (10, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages ecryptfs-utils depends on:
ii  keyutils                      1.2-10     Linux Key Management Utilities
ii  libc6                         2.9-4      GNU C Library: Shared libraries
ii  libecryptfs0                  71-1       ecryptfs cryptographic filesystem 
ii  libgcrypt11                   1.4.4-2    LGPL Crypto library - runtime libr
ii  libgpg-error0                 1.6-1      library for common error values an
ii  libgpgme11                    1.1.8-2    GPGME - GnuPG Made Easy
ii  libkeyutils1                  1.2-10     Linux Key Management Utilities (li
ii  libpam0g                      1.0.1-9    Pluggable Authentication Modules l

ecryptfs-utils recommends no packages.

Versions of packages ecryptfs-utils suggests:
ii  cryptsetup                    2:1.0.6-7  configures encrypted block devices
pn  opencryptoki                  <none>     (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to