Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

start-stop-daemon: pam_start should not be called from inside chroot #543

Open
sijanec opened this issue Aug 26, 2022 · 0 comments
Open

Comments

@sijanec
Copy link

sijanec commented Aug 26, 2022

This is a followup to a PR I made regarding this issue, and I'd like to hear some comment.

In Gentoo's OpenRC (very close to upstream), pam_start(3) is called after chroot(2), so the process is unable to find the files required for PAM, as you can see on this strace output with unmodified start-stop-daemon: http://of.sijanec.eu/krneki/strace.txt

With a modified start-stop-daemon, chroot is correctly executed after pam_start and services utilizing --chroot option work.

On current release, --chroot is broken unless PAM files are mounted in the chroot, which might even be a security issue.

Related PR is #517, #517

@vapier vapier changed the title pam_start should not be called from inside chroot in start-stop-daemon start-stop-daemon: pam_start should not be called from inside chroot Jan 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant