Package: libpam-abl Version: 0.6.0-4 Severity: critical Justification: breaks the whole system
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 With latest version of libpam-abl, it is not possible to login to the system. Regular users, root and all users over SSH fail to login. Only SSH key based login works (and it not possible to sudo/su after that). It appears the new package is installing the pam_abl.so module in the wrong location (/usr/lib/security/) instead of earlier version's correct location (/lib/<arch-triplet>/security). I suppose the multiarch patch that was removed needs some work. There are quite a few reports from FreedomBox users regarding this. It would be nice to have a quick resolution to this issue. The following are the relevant logs: fbx@freedombox-vm1:~$ su - fbx Password: su: Module is unknown - From /var/log/auth.log May 18 13:36:44 freedombox-vm1 su[17570]: PAM unable to dlopen(pam_abl.so): /lib/security/pam_abl.so: cannot open shared object file: No such file or directory May 18 13:36:44 freedombox-vm1 su[17570]: PAM adding faulty module: pam_abl.so May 18 13:36:50 freedombox-vm1 su[17570]: pam_authenticate: Module is unknown May 18 13:36:50 freedombox-vm1 su[17570]: FAILED su for fbx by fbx May 18 13:36:50 freedombox-vm1 su[17570]: - /dev/pts/2 fbx:fbx May 18 13:39:01 freedombox-vm1 CRON[19526]: PAM unable to dlopen(pam_abl.so): /lib/security/pam_abl.so: cannot open shared object file: No such file or directory May 18 13:39:01 freedombox-vm1 CRON[19526]: PAM adding faulty module: pam_abl.so - -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386, armhf Kernel: Linux 4.5.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJXPHMMAAoJEDbDYUQMm8lx+goP/2uiCJELfzP75HWJmzlqiWG8 7I4AzKKfTEG2bcqnMRxV+8/mQS8yMRDFRQafg2fImwpTArsAT4ESMcncx0IDtqdO PeaUyMLzh57MgMTsEnFzyrA+tbFYC5CBEC4flSoThbNG0h3D0N3iE109sdQzxiEm lAm7rYHaN3+dFlZCHXi7KZoSQrsp6868WEKxw5euXOawcnELvVMQmsiuSw5AS787 c9eHo9txAH7KJnFPjjoz4OuzqeE6P5mHu4dghx8JnFehIH2bNkrO2kMRmNAuON7T hp5C1B6YJ5ZLecKnqVXxTCg/aL+3yzjzRWWZcwMwgmVF9J9fAxANnw0hmuNx10EK sGSslkCliTTUOTJPegIYk9+6+aajiBXDHx9/e7eRRkG4EkGIGf48Jmxj2MxKpQEF NzspJMBEgqw8d9zRYxG0FFN9H4KgK/PRvvTFF0WmdQZctZKWuJQKsXaON1i8/MdI omuwNREzZweTdYrh/ErcC1Jzt/USiE8H8kfXnwoYQq1ewvKvkJkdYyPEPvrsnXF2 OMiooYRHrN9pG05zZ+fZZ3h7LlGVKCvbDbb+k6IjA1e6G7Bt5f2nJ0NUsHfbhJ+J ncXj8Lw6/laoV8XKal7nNtR2xBApGPfOs9nllPOWg0kOquAfq0y7K6FCtjVNB4rn lJKWaNVhiqmCcR4ny9CI =Sjkl -----END PGP SIGNATURE-----
