Bug 748215 - coreutils requires pam >= 1.1.3-7
Summary: coreutils requires pam >= 1.1.3-7
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: coreutils
Version: 16
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: ---
Assignee: Ondrej Vasik
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-10-23 05:54 UTC by Bruce Jerrick
Modified: 2011-10-24 14:54 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-10-24 14:54:30 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Bruce Jerrick 2011-10-23 05:54:11 UTC
Description of problem:
The "Requires: pam" of coreutils is inadequate -- /etc/pam.d/su does an
 'include' of postlogin, but /etc/pam.d/postlogin did not exist until
 pam-1.1.3-7 .
Without /etc/pam.d/postlogin, /bin/su will fail:

  su: cannot not open session: Permission denied

with an error message in /var/log/secure:

  ... su: PAM _pam_load_conf_file: unable to open /etc/pam.d/postlogin

So the requires line in th spec file should be:
  Requires: pam >= 1.1.3-7

Version-Release number of selected component (if applicable):
coreutils-8.12-2.fc16.i686
(Note: Same problem exists in util-linux-2.20-1.fc16.i686; a separate
 report has been filed against util-linux .)

This is not likely to happen on a standard spin.  And during OS install,
/etc/pam.d/postlogin is replaced by a symlink to a generated postlogin-ac .
But by examining the following, it is apparent that coreutils really does
need postlogin, and that postlogin first appeared in pam-1.1.3-7:

  $ grep postlogin /etc/pam.d/su
  $ rpm -q --changelog pam-1.1.4-4.fc16 | grep -B1 postlogin
  $ rpmls pam-1.1.4-4.fc16 | grep postlogin

Comment 1 Ondrej Vasik 2011-10-23 10:30:30 UTC
Just to be sure ... as you mention "This is not likely to happen on a standard spin.", you don't expect F16 primary arch update just for this - so just commit&build in F16&Rawhide with fixed requirements should be fine, right?

Comment 2 Ondrej Vasik 2011-10-24 14:54:30 UTC
Anyway, thanks, versioned requires added in coreutils-8.12-4.fc16 and coreutils -8.14-3.fc17, closing RAWHIDE. 
If you think that F16 update in bodhi is required, feel free to write it here, I'll do it - but I don't think it makes sense just for fixing requires (which are usually ok, if you have up2date packages).


Note You need to log in before you can comment on or make changes to this bug.