http://permalink.gmane.org/gmane.os.hurd.devel.readers hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://permalink.gmane.org/gmane.os.hurd.devel.readers/732 <pre>This is now published on http://www.debian.org/ports/hurd/hurd-news.en.html http://www.gnu.org/software/hurd/news/2013-05-debian_gnu_hurd_2013.html Please spread the news :) Samuel </pre> Samuel Thibault 2013-05-21T23:24:49 http://permalink.gmane.org/gmane.os.hurd.devel.readers/731 <pre> My plan is to merge Fedora runuser patch (it means add -g -G options to su(1)) after 2.22. It's too late for 2.22 (as we have -rc2 now). The patch will be available ASAP after 2.22 release in the util-linux upstream tree and maybe will be in 2.22.1 too. Thanks for the references! Karel </pre> Karel Zak 2012-08-20T18:36:10 http://permalink.gmane.org/gmane.os.hurd.devel.readers/730 <pre> So with su being removed in favor of the util-linux implementation, `runuser` is being implemented there too. I.E. it will be available outside of redhat/fedora/centos/... in util-linux &gt;= 2.22, and so should address http://bugs.gnu.org/8700 Note from previous comments in this thread, it seems like allowing runser to be built (as an option?) without requiring PAM, would be useful. For reference, here are utils with similar functionality: chid,really Mentioned in feature request from debian http://bugs.gnu.org/8700 chroot --userspec=U:G --groups=G1,G2,G3 / since coreutils v7.4-16-gc45c51f beware of CVE-2005-4890 setuidgid coreutils internal only http://git.sv.gnu.org/gitweb/?p=coreutils.git;a=blob;f=src/setuidgid.c;hb=HEAD sg from pwdutils http://pubs.opengroup.org/onlinepubs/9699919799/utilities/newgrp.html sudo -u -g runas from titantools cheers, Pádraig. </pre> Pádraig Brady 2012-08-20T09:24:05 http://permalink.gmane.org/gmane.os.hurd.devel.readers/729 <pre> in other words, Gentoo has no choice but to stick to shadow's implementations for the foreseeable future. oh well. -mike </pre> Mike Frysinger 2012-05-31T16:17:21 http://permalink.gmane.org/gmane.os.hurd.devel.readers/728 <pre> Linux_PAM supports --enable-static-modules, not sure how usable is it, but it seems like a better way than duplicate any security sensitive code. Karel </pre> Karel Zak 2012-05-31T12:18:20 http://permalink.gmane.org/gmane.os.hurd.devel.readers/727 <pre> You could still use the PAM API and only implement the features necessary for shadow support. Ie PAM without pluggable modules :-) That way ugly ifdefs and code duplication could be avoided. cu Ludwig </pre> Ludwig Nussel 2012-05-31T08:12:17 http://permalink.gmane.org/gmane.os.hurd.devel.readers/726 <pre> PAM is a complete waste of space on embedded devices and controlled systems. i'm not saying it isn't useful in many setups (perhaps even the majority), just that it is entirely unnecessary in a not insignificant number of other setups. -mike </pre> Mike Frysinger 2012-05-30T15:30:26 http://permalink.gmane.org/gmane.os.hurd.devel.readers/725 <pre> Why? More details, please :-) IMHO is better to use PAM everywhere than duplicate non-PAM code and assume that the code is correct and well tested. PAM is abstraction, the final configuration don't have to be complicated. Karel </pre> Karel Zak 2012-05-30T13:50:57 http://permalink.gmane.org/gmane.os.hurd.devel.readers/724 <pre> coreutils currently needs to be explicitly configured to include `su`. So exisiting releases should support this transition. cheers, Pádraig. </pre> Pádraig Brady 2012-05-29T10:02:20 http://permalink.gmane.org/gmane.os.hurd.devel.readers/723 <pre>Hi! On Tue, 29 May 2012 11:50:25 +0200, I wrote: On the other hand -- why doesn't Debian GNU/Hurd use the same su as Debian GNU/Linux uses? Grüße, Thomas </pre> Thomas Schwinge 2012-05-29T09:57:45 http://permalink.gmane.org/gmane.os.hurd.devel.readers/722 <pre>Hi! On Fri, 25 May 2012 11:26:00 +0200, I wrote: A minor portability patch was all that was needed, &lt;http://news.gmane.org/find-root.php?message_id=%3C1337971261-20684-1-git-send-email-thomas&lt; at &gt;codesourcery.com%3E&gt;, and all that has now been merged to util-linux. How to coordinate this with Debian? Chances are that an updated coreutils release with su removed is made before an util-linux release with su added. Grüße, Thomas </pre> Thomas Schwinge 2012-05-29T09:50:25 http://permalink.gmane.org/gmane.os.hurd.devel.readers/721 <pre> with the new project, this is probably possible requiring pam is a problem. i won't be able to convert over to util-linux for utils that are pam-only. -mike </pre> Mike Frysinger 2012-05-25T17:48:29 http://permalink.gmane.org/gmane.os.hurd.devel.readers/720 <pre> Linux is primary goal, but it seems we're already friendly to non-Linux platforms too (GNU/Hurd and Solaris). $ git log | grep Hurd defaults for Hurd. build-sys: minor changes for GNU/Hurd Here is a patch to fix the build on GNU/Hurd. implemented that way on the Hurd. Is TIOCSETD any kind of standard? Else I GNU/Hurd uses linux-like swapspace, so mkswap makes sense on Set DEFAULT_DEVICE and ALTERNATE_DEVICE for GNU/Hurd and FreeBSD Karel </pre> Karel Zak 2012-05-25T09:44:20 http://permalink.gmane.org/gmane.os.hurd.devel.readers/719 <pre>... Glad to hear it. Thanks! </pre> Jim Meyering 2012-05-25T10:08:21 http://permalink.gmane.org/gmane.os.hurd.devel.readers/718 <pre>Hi! On Fri, 25 May 2012 18:09:18 +0900, Miles Bader &lt;miles&lt; at &gt;gnu.org&gt; wrote: A bunch of it is, but they do have autoconf checks for these features, and a configure run ends as follows, for example: [...] configure: WARNING: non-linux system; do not build libmount configure: WARNING: non-linux system; do not build mount configure: WARNING: non-linux system; do not build losetup configure: WARNING: libmount disabled; do not build fsck configure: WARNING: non-linux system; do not build partx configure: WARNING: libmount disabled; do not build mountpoint configure: WARNING: non-linux system; do not build fallocate configure: WARNING: non-linux system; do not build unshare checking for crc32 in -lz... yes configure: WARNING: non-linux system; do not build swapon configure: WARNING: non-linux system; do not build lsblk configure: WARNING: non-linux system; do not build lscpu configure: WARNING: non-linux system; do not build chcpu configure: WARNING: non</pre> Thomas Schwinge 2012-05-25T09:59:57 http://permalink.gmane.org/gmane.os.hurd.devel.readers/717 <pre>Hi! CCing debian-hurd FYI. On Thu, 24 May 2012 15:21:01 +0200, Jim Meyering &lt;jim&lt; at &gt;meyering.net&gt; wrote: Yes, that appears to be fine -- despite its name, we're using a lot of executables provided by util-linux. I'll test the branch in the lnussel repository and report back. Grüße, Thomas </pre> Thomas Schwinge 2012-05-25T09:26:00 http://permalink.gmane.org/gmane.os.hurd.devel.readers/716 <pre>hmmm, is "utils-linux" stuff that has dependencies on linux-specific interfaces? -miles </pre> Miles Bader 2012-05-25T09:09:18 http://permalink.gmane.org/gmane.os.hurd.devel.readers/715 <pre> mountpoint - already merged from sysvinit into utils-linux 2.20 sulogin - already merged from sysvinit into utils-linux 2.22 last, lastb, wall, mesg - will be merged from sysvinit into util-linux (2.22 ?) pidof - from sysvinit; not sure, probably into procps-ng su - will be merged from coreutils into util-linux (2.22 ?) login - already merged Suse version into original login from utils-linux. The result is PAM-only login(1) with /etc/login.defs support. Fedora and Suse already use this login(1), Arch plans this change. Karel </pre> Karel Zak 2012-05-25T08:53:59 http://permalink.gmane.org/gmane.os.hurd.devel.readers/714 <pre> "shadow" isn't really a Debian project. it was an independent one that slowly died, so peeps at Debian decided to pick it up. the alioth site is a generic project hosting site that Debian maintains to help out its developers. Gentoo uses su from the shadow package too which makes sense considering it provides the user management utilities (adduser/deluser/etc...) as well as things like `login`. it would be nice to find a single home for these guys (su, login, sulogin) as we've got overlap with at least 4 projects: coreutils shadow util-linux sysvinit. -mike </pre> Mike Frysinger 2012-05-24T16:39:21 http://permalink.gmane.org/gmane.os.hurd.devel.readers/713 <pre> Cygwin is another platform that currently uses su from coreutils. However, on cygwin, su is rather restricted in what it can do, and already carries a cygwin-specific patch for hooking into Windows mechanisms for switching privileges. So it's no big loss if coreutils drops su, cygwin will adapt (possibly by using util-linux, possibly by forking the coreutils version with cygwin-specific patches into a cygwin-specific fork). </pre> Eric Blake 2012-05-24T14:55:02 http://permalink.gmane.org/gmane.os.hurd.devel.readers/712 <pre> Fair point. OK cool, I guess we can split up `runuser` and `su`. I'll look at doing a separate `runuser` in coreutils upstream in the next few weeks. cheers, Pádraig. </pre> Pádraig Brady 2012-05-24T14:22:26 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.os.hurd.devel.readers