Package: pbuilder
Version: 0.131
Severity: important

Hi,

I recently noticed that when runing pbuilder build, it fails as
it calls su internally. I tracked this down to su wanting a password,
and futher tracked this to pam using nullok_secure, wheras nullok works,
I guess we aren't coming from a secure tty.

In any case, I found the following hook allows pbuilder build
to work, I'm not sure what a good longer term solution is.

--- begin E00nullok ---
#!/bin/bash
#E00nullok

cat > /etc/pam.d/common-auth << __EOF__
#
# /etc/pam.d/common-auth - authentication settings common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authentication modules that define
# the central authentication scheme for use on the system
# (e.g., /etc/shadow, LDAP, Kerberos, etc.).  The default is to use the
# traditional Unix authentication mechanisms.
#
# nullok_secure does not seem to work when pbuilder calls su
#auth    required        pam_unix.so nullok_secure
auth    required        pam_unix.so nullok
__EOF__
--- end E00nullok ---

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-686-smp
Locale: LANG=ja_JP.eucJP, LC_CTYPE=ja_JP.eucJP (charmap=EUC-JP) (ignored: 
LC_ALL set to ja_JP.eucJP)

Versions of packages pbuilder depends on:
ii  cdebootstrap                  0.3.8      Bootstrap a Debian system
ii  coreutils                     5.2.1-2.1  The GNU core utilities
ii  debianutils                   2.14.3     Miscellaneous utilities specific t
ii  gcc                           4:4.0.1-3  The GNU C compiler
ii  wget                          1.10.1-1   retrieves files from the web

Versions of packages pbuilder recommends:
ii  devscripts                    2.9.7      Scripts to make the life of a Debi
ii  fakeroot                      1.5.1      Gives a fake root environment
ii  sudo                          1.6.8p9-2  Provide limited super user privile

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to