[Pkg-shadow-devel] Bug#304398: chfn: does not work as documented in its man page.

Jonay Gomez Jonay Gomez <jgomez@naleco.com>, 304398@bugs.debian.org
Tue, 12 Apr 2005 23:23:49 +0200


Package: passwd
Version: 20000902-12woody1

Program chfn does not work as documented in its man page.

The man page says any normal user can update, for his own user account,
the "fullname" part of the GCOS field.

That is not true in Debian-Woody for the chfn command and the "fullname"
part of any normal user account GCOS field. (I don't have Debian-Sarge
here but it is trivial to try whether this bug is there too or not.)

jgomez1@gran:~$ cat /etc/passwd | grep jgomez1
jgomez1:x:1000:1000:Jonay Gomez,,,:/home/jgomez1:/bin/bash
jgomez1@gran:~$ who am i
jgomez1  pts/7        Apr 12 22:15 (tecra:S.5)
jgomez1@gran:~$ chfn -f "Perico Palotes" jgomez1
chfn: Permission denied.
jgomez1@gran:~$

The man page for chfn has to say "A normal user may only change the fields
for their  own  account, except the fullname part", or else allow the
chfn command for any user to update his own fullname information for
his own account.

These are passwd package dependencies and their versions on this system:

ii  libc6                         2.2.5-11.8                    GNU C Libra=
ry: Shared libraries and Timezone data
ii  libpam0g                      0.72-35                       Pluggable A=
uthentication Modules library
ii  login                         20000902-12woody1             System logi=
n tools
ii  libpam-modules                0.72-35                       Pluggable A=
uthentication Modules for PAM
ii  passwd                        20000902-12woody1             Change and =
administer password and group data.


--=20
Jonay G=F3mez
jgomez@naleco.com