Package: libpam-unix2
Version: 1:2.4.1-4
Severity: important

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If an application with a UID greater than 0 tries to authenticate a user
using pam_unix2.so (e.g. gnome-screensaver or su) it starts to forks
numerous instances of the helper binary unix2_chkpwd:

  PID TTY      STAT   TIME COMMAND
   7690 pts/2    Ss     0:00 -bash
   12696 pts/2    SL+    0:00  \_ su - FidlerAnke
   12700 pts/2    SL+    0:00      \_ /sbin/unix2_chkpwd su FidlerAnke
   12730 pts/2    SL+    0:00          \_ /sbin/unix2_chkpwd su
   FidlerAnke
   12744 pts/2    SL+    0:00              \_ /sbin/unix2_chkpwd su
   FidlerAnke
   12766 pts/2    SL+    0:00                  \_ /sbin/unix2_chkpwd su
   FidlerAnke
   12810 pts/2    SL+    0:00                      \_ /sbin/unix2_chkpwd
   su FidlerAnke
   12813 pts/2    SL+    0:00                          \_
   /sbin/unix2_chkpwd su FidlerAnke
   12827 pts/2    SL+    0:00                              \_
   /sbin/unix2_chkpwd su FidlerAnke
   12834 pts/2    SL+    0:00                                  \_
   /sbin/unix2_chkpwd su FidlerAnke
   12860 pts/2    SL+    0:00                                      \_
   /sbin/unix2_chkpwd su FidlerAnke

Logging information after adding "debug" flag to pam_unix2.so:
su[13468]: pam_unix2(su:auth): pam_sm_authenticate() called
su[13468]: pam_unix2(su:auth): username=[FidlerAnke]
su[13468]: pam_unix2(su:auth): running helper binary
su[13468]: pam_unix2(su:auth): _unix2_run_helper_binary called.
unix2_chkpwd: pam_unix2(su:auth): pam_sm_authenticate() called
unix2_chkpwd: pam_unix2(su:auth): username=[FidlerAnke]
unix2_chkpwd: pam_unix2(su:auth): running helper binary
unix2_chkpwd: pam_unix2(su:auth): _unix2_run_helper_binary called.
unix2_chkpwd: pam_unix2(su:auth): pam_sm_authenticate() called
unix2_chkpwd: pam_unix2(su:auth): username=[FidlerAnke]
unix2_chkpwd: pam_unix2(su:auth): running helper binary
unix2_chkpwd: pam_unix2(su:auth): _unix2_run_helper_binary called.
unix2_chkpwd: pam_unix2(su:auth): pam_sm_authenticate() called
unix2_chkpwd: pam_unix2(su:auth): username=[FidlerAnke]
unix2_chkpwd: pam_unix2(su:auth): running helper binary
unix2_chkpwd: pam_unix2(su:auth): _unix2_run_helper_binary called.
unix2_chkpwd: pam_unix2(su:auth): pam_sm_authenticate() called
unix2_chkpwd: pam_unix2(su:auth): username=[FidlerAnke]
unix2_chkpwd: pam_unix2(su:auth): running helper binary
unix2_chkpwd: pam_unix2(su:auth): _unix2_run_helper_binary called.
unix2_chkpwd: pam_unix2(su:auth): pam_sm_authenticate() called
unix2_chkpwd: pam_unix2(su:auth): username=[FidlerAnke]
unix2_chkpwd: pam_unix2(su:auth): running helper binary
unix2_chkpwd: pam_unix2(su:auth): _unix2_run_helper_binary called.
unix2_chkpwd: pam_unix2(su:auth): pam_sm_authenticate() called
unix2_chkpwd: pam_unix2(su:auth): username=[FidlerAnke]
unix2_chkpwd: pam_unix2(su:auth): running helper binary
unix2_chkpwd: pam_unix2(su:auth): _unix2_run_helper_binary called.
unix2_chkpwd: pam_unix2(su:auth): pam_sm_authenticate() called
unix2_chkpwd: pam_unix2(su:auth): username=[FidlerAnke]
unix2_chkpwd: pam_unix2(su:auth): running helper binary
unix2_chkpwd: pam_unix2(su:auth): _unix2_run_helper_binary called.

... and so on.

- -- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_AT.UTF-8, LC_CTYPE=de_AT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libpam-unix2 depends on:
ii  libc6                         2.9-26     GNU C Library: Shared libraries
ii  libpam0g                      1.1.0-2    Pluggable Authentication Modules l
ii  libxcrypt1                    1:2.4-1    Crypt library for DES, MD5, and bl

libpam-unix2 recommends no packages.

libpam-unix2 suggests no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkqeWR0ACgkQeJ3z1zFMUGZN6gCeJJ0t2JVi8mSsuuROkDygDe61
loUAnAxEOyQbIxNnFGtFP1kEFs90Q7vq
=ugF/
-----END PGP SIGNATURE-----



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to