Package: sudo Version: 1.8.5p2-1 Severity: normal sudo apparently sets the wrong requesting user (which is just the real uid of the process, iirc) when calling the pam stack, which breaks at least pam_xauth. compare the debug outputs:
=== su (works) === pam_unix(su:session): session opened for user root by obuddenh(uid=1002) pam_xauth(su:session): requesting user 1002/1002, target user 0/0 pam_xauth(su:session): /home/obuddenh/.xauth/export does not exist, ignoring pam_xauth(su:session): /root/.xauth/import does not exist, ignoring pam_xauth(su:session): reading keys from `/home/obuddenh/.Xauthority' pam_xauth(su:session): running "/usr/bin/xauth -f /home/obuddenh/.Xauthority nlist :0" as 1002/0 pam_xauth(su:session): writing key `0100 0007 74726f6c6c3038 0001 30 0012 4d49542d4d414749432d434f4f4b49452d31 0010 8977806e7957465e43f8847d0562c87d ' to temporary file `/root/.xauthyPpqBT' pam_xauth(su:session): running "/usr/bin/xauth -f /root/.xauthyPpqBT nmerge -" as 0/0 === sudo (broken) === pam_unix(sudo:session): session opened for user root by obuddenh(uid=0) pam_xauth(sudo:session): requesting user 0/0, target user 0/0 pam_xauth(sudo:session): /root/.xauth/export does not exist, ignoring pam_xauth(sudo:session): /root/.xauth/import does not exist, ignoring pam_xauth(sudo:session): reading keys from `/root/.Xauthority' pam_xauth(sudo:session): running "/usr/bin/xauth -f /root/.Xauthority nlist :0" as 0/1002 pam_xauth(sudo:session): no key the same bug appears to be reported at: https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/370607 -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-3-amd64 (SMP w/8 CPU cores) Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages sudo depends on: ii libc6 2.13-35 ii libpam-modules 1.1.3-7.1 ii libpam0g 1.1.3-7.1 ii libselinux1 2.1.9-5 sudo recommends no packages. sudo suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
