[Pkg-shadow-devel] Bug#620898: Moving bash from essential/required to important
Dmitry Bogatov
KAction at debian.org
Sun Mar 10 19:13:03 GMT 2019
[2017-01-21 20:54] Balint Reczey <balint at balintreczey.hu>
> Control: tags -1 confirmed
>
> Hi,
>
> On Sat, 27 Sep 2014 21:14:46 -0500 Troy Benjegerdes <hozer at hozed.org> wrote:
> > So can we have a prerm script for bash that sets the root
> > shell back to /bin/sh, or at least asks the admin if they want
> > zsh or tcsh, and warns about any other users?
> >
> > Any of this stuff of trying to have login figure out the
> > right shell seems like a new remote exploit in the making.
>
> It is too late for making changes related to this bug in Stretch. :-(
> In the next cycle we will evaluate switching to login implementatiln in
> util-linux per #833256. This bug may be solved by the switch or later in
> util-linux.
Hi! What is the current state of bug? There was fine (IMO) proposal,
So can we have a prerm script for bash that sets the root
shell back to /bin/sh, or at least asks the admin if they want
zsh or tcsh, and warns about any other users?
but as bash=5.0-2 it did not make its way. What is missing? Should I
submit patch, implementing this proposal?
--
Note, that I send and fetch email in batch, once every 24 hours.
If matter is urgent, try https://t.me/kaction
--
More information about the Pkg-shadow-devel
mailing list