Package: john Version: 1.6-33 Severity: important *** Please type your report below this line ***
When I use john in woody, I upgrade to Sarge box from Woody box. I upgrade Debian in midnight (over 1:00;I think Debian system did /usr/share/john/cronjohn start) Then, /usr/share/john/cronjohn delete /etc/shadow ! It is serious situation. PAM does not work. user can not login. I use ssh (switch UsePAM Yes to No in /etc/sshd_config) Then, I resuce from /var/backup/shadow.bak. See below: This script delete /etc/shadow # bash -x /usr/share/john/cronjob start + JOHNDIR=/usr/sbin + PASSWD=/etc/passwd + SHADOW=/etc/shadow + RUNDIR=/var/lib/john + PIDDIR=/var/run/john + RESTORE=/var/lib/john/restore ++ grep -v '^#' /etc/john/john-mail.conf ++ grep -e '[ ]*passfile[ ]*=[ ]*' ++ sed -e 's/#.*//' -e 's/.*=[ ]*//' ++ head -1 + PASSFILE=/etc/shadow + cd /var/lib/john + '[' 1 -ne 1 ']' + john_start + '[' -z /etc/shadow ']' + RESTOREFILE= + '[' -f /var/lib/john/restore ']' + '[' -z '' -o '!' -f '' ']' + RESTORE_OPTION= + RESTOREFILE= + '[' -f /var/lib/john/restore ']' + rm -f /etc/shadow /etc/shadow.LrRdB0 ++ mktemp /etc/shadow.XXXXXX + TMPFILE=/etc/shadow.McrxWe + chmod og-rwx /etc/shadow.McrxWe + '[' -n /etc/shadow -a -f /etc/shadow ']' + cat /etc/passwd + '[' '!' -f /var/lock/john -a '!' -f /var/run/john/john.pid ']' ++ cat /var/run/john/john.pid + PID=4739 ++ readlink /proc/4739/exe + PROCPATH= ++ echo ++ sed '-es^/usr/sbin/john.*^/usr/sbin/john^' + RELEVANTPATH= + '[' '' = /usr/sbin/john ']' + mail -s 'There are John cron'\''s stale files' root -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.6.8 Locale: LANG=ja_JP.eucJP, LC_CTYPE=ja_JP.eucJP (charmap=EUC-JP) Versions of packages john depends on: ii debconf 1.4.30.13 Debian configuration management sy ii dpkg 1.10.28 Package maintenance system for Deb ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an -- debconf information excluded -- --- blog -> http://blog.good-day.net/~yabuki/diary/ --- Tel 06-4796-6670 FAX 06-4796-7373 --- Yukiharu YABUKI <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
