[Pkg-shadow-devel] Bug#620898: Moving bash from essential/required to important

Dmitry Bogatov KAction at debian.org
Sun Mar 10 19:13:03 GMT 2019


[2017-01-21 20:54] Balint Reczey <balint at balintreczey.hu>
> Control: tags -1 confirmed
>
> Hi,
>
> On Sat, 27 Sep 2014 21:14:46 -0500 Troy Benjegerdes <hozer at hozed.org> wrote:
> > So can we have a prerm script for bash that sets the root
> > shell back to /bin/sh, or at least asks the admin if they want
> > zsh or tcsh, and warns about any other users?
> > 
> > Any of this stuff of trying to have login figure out the 
> > right shell seems like a new remote exploit in the making.
>
> It is too late for making changes related to this bug in Stretch. :-(
> In the next cycle we will evaluate switching to login implementatiln in
> util-linux per #833256. This bug may be solved by the switch or later in
> util-linux.

Hi! What is the current state of bug? There was fine (IMO) proposal,

	So can we have a prerm script for bash that sets the root
	shell back to /bin/sh, or at least asks the admin if they want
	zsh or tcsh, and warns about any other users?

but as bash=5.0-2 it did not make its way. What is missing? Should I
submit patch, implementing this proposal?
-- 
        Note, that I send and fetch email in batch, once every 24 hours.
                 If matter is urgent, try https://t.me/kaction
                                                                             --



More information about the Pkg-shadow-devel mailing list