Your message dated Mon, 13 May 2019 15:59:13 +0100
with message-id <[email protected]>
and subject line Re: Bug#501807: hal: does not work with dynamically assigned
secondary groups
has caused the Debian Bug report #501807,
regarding dbus: Since security fix missing pam_group support missing more then
ever
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
501807: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501807
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dbus
Version: 1.2.1-5
Severity: important
Hi,
if I read the Ubuntu bug-reports correctly pam_group support is a
wishlist item - but since the newest security fix that feature is
required more then ever. In my config most LDAP users get their group
settings via groups.conf like ...
*;*;*;Al0000-2400;audio, video, dialout, netdev, plugdev, cdrom
and tweaking the dbus config has become more difficult.
Thanks.
-- System Information:
Debian Release: 5.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-13-x86 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages dbus depends on:
ii adduser 3.110 add and remove users and groups
ii debianutils 2.30 Miscellaneous utilities specific t
ii libc6 2.7-18 GNU C Library: Shared libraries
ii libdbus-1-3 1.2.1-5 simple interprocess messaging syst
ii libexpat1 2.0.1-4 XML parsing C library - runtime li
ii libselinux1 2.0.65-5 SELinux shared libraries
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
Versions of packages dbus recommends:
ii dbus-x11 1.2.1-5 simple interprocess messaging syst
dbus suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 1.13.4
On Fri, 24 Oct 2008 at 02:42:39 +0200, Michael Biebl wrote:
> Afaik, dynamically assigned groups never worked with dbus.
This wasn't possible to implement in a secure way until several years
after this bug report (see upstream bug
<https://bugs.freedesktop.org/show_bug.cgi?id=9328>).
Linux kernels >= 4.13 implement a new SO_PEERGROUPS socket option that
can finally be used to implement this feature securely, and
dbus >= 1.13.4 (currently only in experimental, but likely to be in the
Debian 11 stable release in about 2 years) makes use of it.
smcv
--- End Message ---
