Package: sudo Version: 1.9.17p2-7 Severity: wishlist Hi Marc,
in the course of getting sssd back into Debian testing, I came across this last RC bug to fix:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1129522 The bug report is valid and reproducible in a test setup.In a previous bug fix, it was decided that libsss-sudo owns the sudoers: entry in nsswitch.conf. When we install the package, it adds sudoers: sss and sudo immediately stops seeing /etc/sudoers.
There are two meaningful approaches how to address this: add the sudoers: entry to base-files (and make it an official field in nsswitch.conf) or (and I think this hadn't come up, so far) sudo itself owns that nsswitch.conf key/entry.
In fact, sudo works well with /etc/sudoers without an entry in nsswitch.conf. However, it does not hurt if `sudoers: files` exists in nsswitch.conf, either. And what package could better own this entry in nsswitch.conf than sudo itself???
So here is my idea:* you add a debian/sudo.nss file into the sudo src:pkg with the following content:
```
sudoers database-add
sudoers first files
```
* And for all other consumers, such as sssd, we add:
debian/control:
Pre-Depends: sudo (>= <version-that-adds-the-above-file>)
debian/lib<foo>-sudo.nss
```
sudoers database-require
sudoers after=files <foo>
```
What do you think? If I have to fix #1129522 only from within
libsss-sudo, it gets really hacky and I'd like to avoid that.
Thanks! Mike -- mike gabriel aka sunweaver (Debian Developer) mobile: +49 (1520) 1976 148 landline: +49 (4351) 486 14 27 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: [email protected], http://sunweavers.net
pgpSk7gteRCQc.pgp
Description: Digitale PGP-Signatur
