[Fingerforce-devel] Bug#975876: libpam-fprintd: Upgrade removed fprintd method from /etc/pam.d/common-auth

[Asher Gordon]

Package: libpam-fprintd
Version: 1.90.1-2
Severity: important
X-Debbugs-Cc: Asher Gordon <AsDaGo at posteo.net>

Dear Maintainer,

When I upgraded the libpam-fprintd package to 1.90.1-2 (from 0.8.1-2​¹​),
fingerprint scanning stopped working for many things, including login,
sudo, and systemctl (but still worked for GDM and GNOME). I figured out
that this was because the pam_fprintd.so method had been removed from
/etc/pam.d/common-auth. After using pam-auth-update to re-add fprintd,
everything worked as expected.

The upgrade should not have removed the pam_fprintd.so method from
/etc/pam.d/common-auth. Indeed, I see no reason why that file should be
modified at all.

I set the severity of this bug to important, since removing fprintd from
common-auth breaks many things, and the cause of the problem is not
obvious. Feel free to downgrade if you disagree.

The best solution, in my opinion, would be to stop further updates from
modifying common-auth. At the very least, something should be added to
NEWS.Debian indicating that pam-auth-update will need to be re-run in
order to have fingerprints working again.

Also, it's possible that a different package upgrade caused the config
file to change, but this package seems the likeliest candidate.

Thanks,
Asher


Footnotes:
​¹​  I had been using an old version because of other problems. See
   #949165.


-- System Information:
Debian Release: bullseye/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-3-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libpam-fprintd depends on:
ii  fprintd         1.90.1-2
ii  libc6           2.31-4
ii  libpam-runtime  1.3.1-5
ii  libpam0g        1.3.1-5
ii  libsystemd0     246.6-4

libpam-fprintd recommends no packages.

libpam-fprintd suggests no packages.

-- no debconf information

-- 
He was part of my dream, of course -- but then I was part of his dream too.
		-- Lewis Carroll
                               --------
I prefer to send and receive mail encrypted. Please send me your
public key, and if you do not have my public key, please let me
know. Thanks.

GPG fingerprint: 38F3 975C D173 4037 B397  8095 D4C9 C4FC 5460 8E68
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 251 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/fingerforce-devel/attachments/20201126/ccd5b7bf/attachment.sig>