Your message dated Wed, 11 Jun 2025 15:16:18 -0700
with message-id <17156010.0ZKypZ73Fx@soren-desktop>
and subject line please separate passwd manipulation from the library package,
together with expect et al
has caused the Debian Bug report #900761,
regarding please separate passwd manipulation from the library package,
together with expect et al
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
900761: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900761
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: courier-authlib
Hi,
For some reason there exists an expect script in
/usr/lib/courier/courier-authlib/authsystem.passwd
which seems to be calling passwd(1),
which causes courier-authlib to depend on expect(1),
which in turn has a bunch of other dependencies,
which in turn gets installed on all systems where users want packages
that happen to depend on courier-authlib (regardless of whether those
users actually use the authlib's facilities)
In my case, the latter is maildrop, which honestly I have no idea whatsoever
how it could ever come into a situation where it would want the
authentication subsystem to invoke a user password change.
In fact I'm pretty sure someone would slap us with a critical security bug
if it ever came to pass that a mail filtering utility was even attempting
to manipulate the password of a user for whom it was filtering mail.
And they would not be wrong, because that scenario sounds like an
abomination. I sincerely hope it is not practically possible.
Please separate this functionality from the library package into a separate
package, which can then depend on and invoke whatever it needs.
TIA.
--
2. That which causes joy or happiness.
--- End Message ---
--- Begin Message ---
I am going to close this bug report as there was no response to the previous
message. This seems to be the desired functionality of the package, as least
as upstream has designed it.
--
Soren Stoutner
[email protected]
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
