debian-security December 2011 archive
Main Archive Page > Month Archives  > debian-security archives
debian-security: Re: Command 'su' is not working in virtual cons

Re: Command 'su' is not working in virtual console

From: Bart-Jan Vrielink <bartjan_at_nospam>
Date: Fri Dec 16 2011 - 20:56:12 GMT
To: debian-security@lists.debian.org

On 12/16/11 21:47, Marko Randjelovic wrote:
> All looks OK. Just there is a dot after permissions in "ls -l".
>

That dot is an indication that there are extended attributes (like
selinux) associated with the file. Try ls -Z on the file if you're curious.

> On 12/16/2011 09:32 PM, Bart-Jan Vrielink wrote:
>
>> On 12/16/11 21:07, Freddy Spierenburg wrote:
>>
>>> Hi Marko,
>>>
>>> On Fri, Dec 16, 2011 at 08:51:58PM +0100, Marko Randjelovic wrote:
>>>
>>>
>>>> su does not ask for a password, just exits imediately with exit
>>>> status 1.
>>>>
>>>>
>>> Have you already tried to strace it, to possibly see what's going
>>> on? And if so, where does it end?
>>>
>>>
>> You shouldn't be able to strace suid programs.
>>
>> Marko, I do not exactly know what the cause of this problem is, but I
>> would inspect the /etc/login.defs file (and then especially the value
>> of the CONSOLE variable) and also look around in /etc/pam.d/su (and
>> included files) and the /etc/security directory (especially the
>> access.conf file). These are some of the places where one could
>> configure su to behave more or less like you describe.
>>
>>
>
>

-- To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: http://lists.debian.org/4EEBB06C.4090708@vrielink.net