Package: ecryptfs-utils
Version: 111-6
Severity: normal
Tags: patch

Dear Maintainer,

ecrypts-mount-private is failing when starting a user session via sudo (and
probably other methods where no password is required for login, e.g. ssh with
keyfile)

Error message is: "mount: No such file or directory" and home directory is not
mounted.

Reason is that the user keyring is not linked to the session keyring.
see also here https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870126#15

Easy fix is to add a file into /etc/profile.d which does this linking, a one-
liner in it is sufficient:
keyctl link @u @s

After this small change ecryptfs-mount-private is working as intended.

This shouldn't raise any safety concerns as all is done with normal user
permissions, the same is done by su (resp. pam) automatically. If the user
keyring is already linked this additional command will do nothing and doesn't
do any harm.

So please include a file in the package which does this fix.


-- System Information:
Debian Release: 12.5
  APT prefers stable
  APT policy: (990, 'stable'), (900, 'stable-updates')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-18-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ecryptfs-utils depends on:
ii  gettext-base    0.21-12
ii  keyutils        1.6.3-2
ii  libc6           2.36-9+deb12u4
ii  libecryptfs1    111-6
ii  libgpgme11      1.18.0-3+b1
ii  libkeyutils1    1.6.3-2
ii  libpam-runtime  1.5.2-6+deb12u1
ii  libpam0g        1.5.2-6+deb12u1
ii  libtspi1        0.3.15-0.3

ecryptfs-utils recommends no packages.

Versions of packages ecryptfs-utils suggests:
ii  cryptsetup  2:2.6.1-4~deb12u2
ii  rsync       3.2.7-1

-- no debconf information

Reply via email to