[Pkg-shadow-devel] Bug#830255: login: Please add pts/0 to /etc/securetty

[Vasudev Kamath]

Package: login
Version: 1:4.2-3.1
Severity: important

Dear Maintainer,

Please add pts/0 to list of terminals allowed for root login
i.e. /etc/securetty. pts/0 is used when we try to login to a container
which is run using systemd-nspawn via machinectl.

*machinectl login container* command uses pts/0 and normally a freshly
 created container only contain root account. Since /etc/securetty
 does not list pts/0 we are not allowed to login as root.

Only way to work around is manually modify containers  /etc/securetty
and then launch it via machinectl. Please see related discussion here
¹. In case of arch this file is provided by pam_securetty but in
Debian this shipped via login package.

Marking bug as important as it renders machinectl login command
useless till we add a secondary account or manually modify the
/etc/securetty file inside the container.

¹ https://github.com/systemd/systemd/issues/852

Cheers,

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 4.6.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages login depends on:
ii  libaudit1       1:2.5.2-1
ii  libc6           2.22-11
ii  libpam-modules  1.1.8-3.3
ii  libpam-runtime  1.1.8-3.3
ii  libpam0g        1.1.8-3.3

login recommends no packages.

login suggests no packages.

-- no debconf information