Package: util-linux Version: 2.29-1 Severity: important File: /sbin/sulogin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Must press Control-D twice to exit sulogin. The first attempt to press Control-D will erronously report 'Login incorrect'. The second attempt succeeds, *unless* sulogin is being run with - --timeout root@miraculix:/tmp# sulogin Give root password for maintenance (or press Control-D to continue): Login incorrect Give root password for maintenance (or press Control-D to continue): This bug is extra nasty in combination with the timeout bug, since Control-D apparently is completely ignored after the SIGALRM. This means that there is no way to exit sulogin after the timeout has expired without knowing the root password. Combine that with using SULOGIN=yes and you have a system which reuires root password knowledge to boot... That's bad. Bjørn - -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages util-linux depends on: ii libblkid1 2.29-1 ii libc6 2.24-7 ii libfdisk1 2.29-1 ii libmount1 2.29-1 ii libncursesw5 6.0+20160917-1 ii libpam0g 1.1.8-3.3 ii libselinux1 2.6-3 ii libsmartcols1 2.29-1 ii libsystemd0 232-6 ii libtinfo5 6.0+20160917-1 ii libudev1 232-6 ii libuuid1 2.29-1 ii zlib1g 1:1.2.8.dfsg-2+b3 util-linux recommends no packages. Versions of packages util-linux suggests: ii dosfstools 4.0-2 ii kbd 2.0.3-2 ii util-linux-locales 2.29-1 - -- no debconf information -----BEGIN PGP SIGNATURE----- iQJCBAEBCgAsFiEE9GFvUSsROzwYJzwh4Zf8Eu/wXs0FAlg8QqkOHGJqb3JuQG1v cmsubm8ACgkQ4Zf8Eu/wXs3VQQ//YGS7zh4Zs/Fg3ZxoAvUx3boEdpCSw8puqyRl zbrA4CCTE/gk38fJUb48RqGUFxLM0deGixlOV6X108NBIWe9+CYQ07zZVrVZ5sYM GX0O0JJF2lAjUcb9xuVuhrjPqVcnw8quJRDLZrMKF8OXnVuSNITqwt5SqqmK9Ofl YxajJ7IqtHsuATO0qfkU79QJHp9t0HZUV+ll9/ekjir0keeCRopLZmEVg4xNL87u wPSXCSsEwIK61w2tbw+pL/LJcFV4y/Zxn9VOm5F4GngIBmYqcINgXHYG8iVNY4M4 aRdYTyQYnx0hc8ENV4XF3x0cdorOxC2PXzMw10qtpko8Ro4o5a1YTrHc2s4hvBIk AKYmIv0SDdDIBux+nIT9/Gg7B6A7r0mknbygsg8380kVhvINZgVeTX+z2axc0dTO R5lP8F39ulFn+/EfFVZw8SA1IjEz8PazuEW6KndGi2L4wbLdaAzQv3bvEHwvKvJ3 0OzDMcoMe21rzuew1O2KqmlXi1tiydmofAAppSKaPrEUNWtw2Irw5aGSYQkdF8It aBQzk8KNPmJizuiBQC1appB17LnWustBPeN11FtctrFWvG50WZILDQSl8V1MELMA rMKX+ZHRKMMUQuEV2LJKJL7OfVsWHUCMAnLGhIN0sgKi/9I8ppekwhUAfWyoEL37 gVv5qis= =I5Bv -----END PGP SIGNATURE-----
