[Pkg-shadow-devel] Bug#265982: bash: Please do not depend on passwd at all, bad in chroot etc.

[Alexander Gattin]

Hi!

Quoting Karl Ramm:
> AFAIC, the *most* right fix is to do nothing (other than
> to remove the dependency in bash).

I disagree. add-shell/remove-shell are very good
candidates for Debian-specific maintenance stuff.

BTW, dependency in bash _is still not removed_
(see bug #305232).

> Also, for things that are already in /etc/shells,
> (as I said in the micropolicy)

P.S.

I also think the /etc/shells file _could_ be split
in two parts/files/dirs: debian-maintained and
locally-maintained.

On installation "passwd" could search for
add-shell/remove-shell and/or debian-maintained
"shells list" and e.g. append it to /etc/shells config
file distributed inside "passwd" package (after
a separator).

Similarly, add-shell/remove-shell could check whether
/etc/shells is installed and update it along with
debian-maintained "shells list" accordingly.

Of course, this is very approximate description.
And I don't think this is _really_ necessary, mostly
due to additional complexity.

-- 
WBR,
xrgtn