Bug#235804: gksu: problem with pam_wheel.so trust group=adm
Edward J. Shornock
"Edward J. Shornock"
<ed@crazeecanuck.homelinux.net>, 235804@bugs.debian.org
Tue, 13 Apr 2004 23:23:17 -0400
Package: gksu
Version: 1.0.4-1
Severity: normal
Followup-For: Bug #235804
For awhile now, gksu would hang after inputting root's password, yet the
process would still be running.
/etc/pam.d/su contains:
uth requisite pam_wheel.so group=wheel debug
auth sufficient pam_wheel.so trust group=adm
Creating a new user, I just added them to the wheel group but NOT to the
adm group. gksu worked as intended. After I removed my username from
the adm group, I could use gksu as well. Now I just need to input
root's password when running "su".
I don't know if this will help, or if it's a problem with the gksu
package, but here's the output from the strace of the process, after
putting in my password (and after changing my real password to
"mypassword"):
read(3, "\1\0\17\2\0\0\0\0L\27 \1\0\0\0\0\1\0\0\0\1\0\0\0H\223Y"..., 32)
= 32
ioctl(3, FIONREAD, [0]) = 0
poll([{fd=3, events=POLLIN}], 1, 0) = 0
write(4, "mypassword\n", 7) = 7
waitpid(21936, 0xbffff6ac, WNOHANG) = 0
select(5, [4], NULL, NULL, {0, 100}) = 1 (in [4], left {0, 1000})
read(4, "mypassword\r\n", 255) = 8
waitpid(21936, 0xbffff6ac, WNOHANG) = 0
select(5, [4], NULL, NULL, {0, 100}) = 0 (Timeout)
So now gksu works fine for me. :) Hopefully this will help someone else
out as well...
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (650, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.5-p4-i686
Locale: LANG=en_US, LC_CTYPE=en_US (ignored: LC_ALL set to C)
Versions of packages gksu depends on:
ii libatk1.0-0 1.4.1-1 The ATK accessibility toolkit
ii libc6 2.3.2.ds1-11 GNU C Library: Shared libraries an
ii libgksu0 1.0.4-1 a graphical fronted to su library
ii libglib2.0-0 2.2.3-1 The GLib library of C routines
ii libgtk2.0-0 2.2.4-3 The GTK+ graphical user interface
ii libpango1.0-0 1.2.5-2.1 Layout and rendering of internatio
-- no debconf information