Bug#276419: [Pkg-shadow-devel] Bug#276419: Announcing changes in su

[Christian Perrier]

> Introduction
> ============
> As reported in #276419, su in the login Debian package doesn't permit to
> specify options to the invoked shell and doesn't respect quoted arguments.
> We plan to revert this behavior and follow su's documentation and other
> implementations.

This is now time to prepare for 4.0.15-2 in unstable, with the
fix.....

So, we will need to warn again maintainers of these packages, in
addition of sending another notice in -devel-announce.


> Package needing changes
> -----------------------
> Micah Anderson <micah at riseup.net>
>         backupninja-0.9.2/handlers/pgsql
>         backupninja-0.9.2/handlers/mysql
>         backupninja-0.9.2/examples/example.rdiff
> Raphael Bossek <bossekr at debian.org>
>         python-4suite-0.99cvs20051115/debian/python-4suite-server.init.d
> Phil Brooke <pjb at debian.org>
>         yiff-2.14.2/build_and_install
> Arnaud Kyheng <Arnaud.Kyheng at free.fr>
>         gnunet-0.7.0b/contrib/init_gnunet_ubuntu
> Brian May <bam at debian.org>
>         amavisd-new-2.3.3/debian/amavisd-new.cron.daily
> Peter Palfrader <weasel at debian.org>
>         echolot-2.1.8/debian/echolot.init



> Javier Fernandez-Sanguino Pen~a <jfs at computer.org>
>         samhain-2.0.10a/init/samhain.start.in

Javier confirmed that samhain is not affected.

> maybe
> -----
> Stefan Hornburg (Racke) <racke at linuxia.de>
>         courier-0.52.1/courier.lpspec(.in)? (maybe not used on Debian)
>         courier-0.52.1/courier.spec(.in)? (maybe not used on Debian)
> Kenneth J. Pronovici <pronovic at debian.org>
>         cedar-backup2-2.7.2/CedarBackup2/peer.py (depends on executeCommand)
> Arnaud Quette <aquette at debian.org>
>         nut-2.0.2/scripts/HP-UX/nut-drvctl.sh (maybe not used on Debian)
>         nut-2.0.2/scripts/HP-UX/nut-upsd.sh (maybe not used on Debian)
> Taku YASUI <tach at debian.or.jp>
>         murasaki-0.8.11/scripts/printer (su $USER -c $CMD, $CMD may have a space)
> Debian Webmin maintainers <webmin-maintainers at lists.alioth.debian.org>
>         usermin-1.160/cron/config-aix (maybe not used on Debian)
>         usermin-1.160/web-lib-funcs.pl
>         usermin-1.160/shell/index.cgi
>         usermin-1.160/fetchmail/check.pl
>         usermin-1.160/commands/run.cgi
>         usermin-1.160/postgresql/postgresql-lib.pl
>         webmin-1.230/web-lib-funcs.pl
>         webmin-1.230/cron/config-aix
>         webmin-1.230/custom/run.cgi


Nicolas, have you been able to check these ones. Otherwise, we will
add their maintainers to the BCC list anyway.



> login will conflict with the package of the first category. When fixed,
> these packages do not need a versionned dependency on login.

We can already set this conflict.


Finally all this should go in a dedicated README file.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20060324/b76d1ecd/attachment.pgp