[Pkg-privacy-maintainers] Bug#911907: monkeysphere: Patch v3

[Daniel Kahn Gillmor]

On Mon 2018-10-29 12:56:48 -0700, Sunil Mohan Adapa wrote:
> Attached the patches do this with /usr/bin/env (better to have full
> path?). I have retested all invocations again.

thanks!  I've applied your patch on the master branch upstream, and then
also changed /usr/bin/env to just "env" -- no reason to be brittle about
where "env" is found on the system.

We haven't released 0.43 yet, but when we do, this change will be
incorporated in it.

> I tried this and it looks like this requires more changes and time which
> I currently am short on. So, I am not proposing 'env -i' at this time.

sounds reasonable to me.

> I confirm that I no longer see problems with TMPDIR after removing
> libpam-tmpdir from the system.

do you think we could just explicitly override TMPDIR as proposed in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=656750#57 to solve
that problem on systems where libpam-tmpdir is present?  I'd welcome a
patch for that too.  Maybe that'd be enough to ship a new upstream
bugfix release -- or do you have other bugs you want to fix before a
release?

> From 435f978ac7815b10eae87c82aa7198d6833c4857 Mon Sep 17 00:00:00 2001
> From: Sunil Mohan Adapa <sunil at medhas.org>
> Date: Sat, 27 Oct 2018 11:00:04 -0700
> Subject: [PATCH] debian: Remove shell for monkeysphere user

i applied a variant of this patch on the debian/master branch (with the
intent that it will only ship as part of the debian packaging once 0.43
is released.  the variant includes a comment encouraging removal of the
additional usermod once a debian stable release has been made that
forces the shell to nologin.

thanks for this work, Sunil!

       --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-maintainers/attachments/20181030/5bffa4c2/attachment.sig>