http://bugzilla.novell.com/show_bug.cgi?id=544154
Summary: sudo crashes Classification: openSUSE Product: openSUSE 11.2 Version: Factory Platform: x86-64 OS/Version: SuSE Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: dutchkind@txoriaskea.org QAContact: qa@suse.de Found By: ---
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; nl; rv:1.9.1.2) Gecko/20090730 SUSE/3.5.2-2.1 Firefox/3.5.2
when trying to mount a truecrypt volume with sudo, sudo crashes. The admin password is asked, but never accepted. When I try from the console I see sudo crashes with a seg fault. /var/log/messages gives: Oct 3 17:42:54 linux-bngv kernel: [ 1768.735755] sudo[6650]: segfault at 0 ip 00007f9b7da5fff0 sp 00007fff6a5ca0b8 error 4 in libc-2.10.1.so[7f9b7d9e4000+151000]
Reproducible: Always
Steps to Reproduce: 1. start a process with sudo 2. 3. Actual Results: seg fault
Expected Results: seg fault
http://bugzilla.novell.com/show_bug.cgi?id=544154
User devzero@web.de added comment http://bugzilla.novell.com/show_bug.cgi?id=544154#c1
roland kletzing devzero@web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |devzero@web.de
--- Comment #1 from roland kletzing devzero@web.de 2009-10-04 11:23:24 MDT --- you mean, sudo does segfault with different commands?
works fine here with 11.2 m8
can you please post your sudoers?
http://bugzilla.novell.com/show_bug.cgi?id=544154
User dutchkind@txoriaskea.org added comment http://bugzilla.novell.com/show_bug.cgi?id=544154#c2
--- Comment #2 from David Kerkhof dutchkind@txoriaskea.org 2009-10-05 00:59:14 MDT --- Ok, this was also on 11.2 m8, so I gave it a try on my desktop which had m8 also freshly installed from live cd with kde. Tried to mount with sudo, worked without any problem.
So I reverted to the fresh installed 11.2 m8 on my laptop (I use partimage images) and tried to do a mount. No problem.
Then I started applying the changes I did before, one by one to see if a change occurred. And yes, after changing my home dir into an encrypted home with yast. It needed to install cryptconfig, so I let it do it. Logged off and in again and tried the sudo mount again. This time the prompt was different to what I was used to:
sudo mount /dev/sda5 /media/test pam_mount password: Segmentation fault
It seemed this pam_mount, which is the different prompt, could be doing something. Here is the part in the logs (var/log/messages):
Oct 5 07:55:01 linux-bngv kernel: [ 207.143589] padlock: VIA PadLock Hash Engine not detected. Oct 5 07:55:01 linux-bngv modprobe: FATAL: Error inserting padlock_sha (/lib/modules/2.6.31-10-desktop/kernel/drivers/crypto/padlock-sha.ko): No such device Oct 5 07:55:05 linux-bngv kernel: [ 210.437042] kjournald starting. Commit interval 15 seconds Oct 5 07:55:05 linux-bngv kernel: [ 210.437123] EXT3 FS on dm-2, internal journal Oct 5 07:55:05 linux-bngv kernel: [ 210.437134] EXT3-fs: mounted filesystem with ordered data mode.
Oct 5 07:55:39 linux-bngv kdm: :0[5356]: Cannot update authorization file in home dir /home/david Oct 5 07:55:50 linux-bngv kdm: :0[5370]: pam_mount(mount.c:67): Errors from underlying mount program: Oct 5 07:55:50 linux-bngv kdm: :0[5370]: pam_mount(mount.c:71): mount.crypt(mtcrypt.c:165): loop mount option ignored Oct 5 07:55:51 linux-bngv kdm: :0[5370]: pam_mount(mount.c:71): Command successful.
(left out the part where wlan was still connecting)
I could include the sudoers file, but that one is standard as it's been created by default. In the previous install I had changed it for truecrypt, but now the first thing that made the error happen was the encrypted home dir, Didn't proceed with the installation of the rest of the applications.
Hope this helps to trace the problem.
http://bugzilla.novell.com/show_bug.cgi?id=544154
Andreas Jaeger aj@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |mc@novell.com |ovo.novell.com |
http://bugzilla.novell.com/show_bug.cgi?id=544154
User dutchkind@txoriaskea.org added comment http://bugzilla.novell.com/show_bug.cgi?id=544154#c3
--- Comment #3 from David Kerkhof dutchkind@txoriaskea.org 2009-10-16 01:13:47 MDT --- I have tried if the problem persists in 11.2 rc1, and yes, same problem. Just tested and also in an unencrypted home, when there are other encrypted home dir's of other users on the system, the sudo command fails the same.
This is important to be fixed since truecrypt can not be used in this setup since it needs sudo.
http://bugzilla.novell.com/show_bug.cgi?id=544154
User dutchkind@txoriaskea.org added comment http://bugzilla.novell.com/show_bug.cgi?id=544154#c4
--- Comment #4 from David Kerkhof dutchkind@txoriaskea.org 2009-10-30 09:36:31 MDT --- I tried again, now in rc2, and finally found what causes the problem. When I replace /etc/pam.d/sudo with the original version after I activate one encrypted home dir in yast, everything works as expected. Now I can use truecrypt again, and other things that seem to depend on sudo work again.
The lines that were removed from /etc/pam.d/sudo to get it working are:
auth optional pam_mount.so session optional pam_cryptpass.so session optional pam_mount.so
I don't know what the other implications are for this change, but in my case it solves a problem.
http://bugzilla.novell.com/show_bug.cgi?id=544154
Michael Calmer mc@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low
http://bugzilla.novell.com/show_bug.cgi?id=544154
Michael Calmer mc@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED
http://bugzilla.novell.com/show_bug.cgi?id=544154
User bugreports@tittel.net added comment http://bugzilla.novell.com/show_bug.cgi?id=544154#c5
Stefan Tittel bugreports@tittel.net changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |bugreports@tittel.net
--- Comment #5 from Stefan Tittel bugreports@tittel.net 2009-11-12 20:47:30 MST --- Could bug 555136 explain the cause of this?
http://bugzilla.novell.com/show_bug.cgi?id=544154
User mc@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=544154#c6
Michael Calmer mc@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |DUPLICATE
--- Comment #6 from Michael Calmer mc@novell.com 2009-11-13 04:06:07 MST --- Yes, it looks so.
I add this as duplicated to bug 555136
*** This bug has been marked as a duplicate of bug 555136 *** http://bugzilla.novell.com/show_bug.cgi?id=555136
http://bugzilla.novell.com/show_bug.cgi?id=544154
User lnussel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=544154#c7
Ludwig Nussel lnussel@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |lnussel@novell.com Resolution|DUPLICATE | AssignedTo|mc@novell.com |prusnak@novell.com
--- Comment #7 from Ludwig Nussel lnussel@novell.com 2009-11-13 06:35:19 MST --- the sudo crash is a separate problem: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492333#25
http://bugzilla.novell.com/show_bug.cgi?id=544154#c8
Jan Engelhardt jengelh@medozas.de changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jengelh@medozas.de --- Comment #8 from Jan Engelhardt jengelh@medozas.de 2009-11-18 09:54:18 UTC --- In case of pam_mount, please try at least v1.30 (current: 1.32).
http://bugzilla.novell.com/show_bug.cgi?id=544154#c9
--- Comment #9 from Jan Engelhardt jengelh@medozas.de 2009-11-18 09:55:50 UTC --- (Packages may be found at http://jftp.medozas.de/)
http://bugzilla.novell.com/show_bug.cgi?id=544154#c10
--- Comment #10 from Stefan Tittel bugreports@tittel.net 2009-11-18 19:49:46 UTC --- Thanks Jan, your pam_mount 1.32 package from the aforementioned URL fixes the sudo problem on x86_64.
Any chance of an official patch/backport?
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c11
Pavol Rusnak prusnak@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEW CC| |prusnak@novell.com AssignedTo|prusnak@novell.com |mc@novell.com Summary|sudo crashes |sudo crashes because of | |pam_mount
--- Comment #11 from Pavol Rusnak prusnak@novell.com 2009-11-19 10:32:42 CET --- Reassigning to pam_mount maintainer.
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c12
Pavol Rusnak prusnak@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |mc@novell.com
--- Comment #12 from Pavol Rusnak prusnak@novell.com 2009-11-19 10:36:17 CET --- Michael: Are there any missing fixes (eg. from 1.32) for pam_mount? If everything is applied please reassign back to me.
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c13
Michael Calmer mc@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Info Provider|mc@novell.com |bugreports@tittel.net
--- Comment #13 from Michael Calmer mc@novell.com 2009-11-19 10:45:43 UTC --- (In reply to comment #10)
Any chance of an official patch/backport?
Please try from here. If you say that this is also working, I will ask for an update.
http://download.opensuse.org/repositories/home:/mcalmer:/branches:/openSUSE:...
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c14
Stefan Tittel bugreports@tittel.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|bugreports@tittel.net |
--- Comment #14 from Stefan Tittel bugreports@tittel.net 2009-11-19 13:29:58 UTC --- Thanks Michael, your package also works nicely and solves the sudo issue.
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c15
Michael Calmer mc@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |maintenance@opensuse.org
--- Comment #15 from Michael Calmer mc@novell.com 2009-11-19 14:02:05 UTC --- Should I do an update for 11.2 for this? Than I need a swampid for it.
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c16
--- Comment #16 from Ludwig Nussel lnussel@novell.com 2009-11-19 14:12:43 UTC --- maybe reuse 28804, cryptsetup turned out to be innocent
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c17
Dirk Mueller dmueller@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW CC| |dmueller@novell.com Info Provider|maintenance@opensuse.org |
--- Comment #17 from Dirk Mueller dmueller@novell.com 2009-11-19 17:57:33 CET --- so the summary is: the cryptsetup update should be rejected and instead replaced by a sudo update?
the please use swamp 28804
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c18
Christian Dengler cdengler@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |cdengler@novell.com
--- Comment #18 from Christian Dengler cdengler@novell.com 2009-11-19 20:42:48 UTC --- The planned cryptsetup update is replaced by a sudo update. SwampID 28804. Update information renewed.
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c19
Michael Calmer mc@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED Target Milestone|--- |Final
--- Comment #19 from Michael Calmer mc@novell.com 2009-11-20 09:04:12 UTC --- patchinfo and package submitted to 11.2 . Closing this bug as fixed.
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c20
Swamp Workflow Management swamp@suse.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:released:11.2:28949
--- Comment #20 from Swamp Workflow Management swamp@suse.com 2009-11-30 16:23:26 UTC --- Update released for: pam_mount, pam_mount-debuginfo, pam_mount-debugsource Products: openSUSE 11.2 (debug, i586, x86_64)
http://bugzilla.novell.com/show_bug.cgi?id=544154
http://bugzilla.novell.com/show_bug.cgi?id=544154#c21
--- Comment #21 from Marcus Meissner meissner@novell.com 2009-11-30 16:24:01 UTC --- just released. report if it does not work.
http://bugzilla.novell.com/show_bug.cgi?id=544154 http://bugzilla.novell.com/show_bug.cgi?id=544154#c22
--- Comment #22 from Bernhard Wiedemann bwiedemann@suse.com --- This is an autogenerated message for OBS integration: This bug (544154) was mentioned in https://build.opensuse.org/request/show/24758 11.2 / pam_mount https://build.opensuse.org/request/show/24760 Factory / pam_mount