Adduser devel - Mar 2006 - Bug#357978: adduser calls /usr/bin/chfn instead of invoking chfn from PATH

Package: adduser
Version: 3.63

Can''t exec "/usr/bin/chfn": No such file or directory at
/usr/sbin/adduser line 892, <FIND> line 9.
adduser: `/usr/bin/chfn naath'' returned error code 16777215.
Aborting.

# type chfn
chfn is /usr/local/bin/chfn
#

(I have diverted /usr/bin/chfn so that I can replace it with my own,
which is a compatible replacement/wrapper.)

Ian.

tags #357978 confirmed
thanks

On Mon, Mar 20, 2006 at 04:02:21PM +0000, Ian Jackson
wrote:
> Can''t exec "/usr/bin/chfn": No such file or directory at
> /usr/sbin/adduser line 892, <FIND> line 9.
> adduser: `/usr/bin/chfn naath'' returned error code 16777215.
> Aborting.
> 
> # type chfn
> chfn is /usr/local/bin/chfn
> #
> 
> (I have diverted /usr/bin/chfn so that I can replace it with my own,
> which is a compatible replacement/wrapper.)
Hm. We are using hard-coded paths since we avoid using a shell for
subprocess invocation. We''re going to change to a PATH-honoring setup
in one of the next versions, but we''re going to set our own PATH on
startup to avoid privilege escalation issues. Most probably, the PATH
will be /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin,
so you''d really need to divert /usr/bin/chfn away to have
/usr/local/bin/chfn used.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don''t trust Computers. They | Mailadresse
im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835

Processing commands for control@bugs.debian.org:
> tags #357978 confirmed
Bug#357978: adduser calls /usr/bin/chfn instead of invoking chfn from PATH
There were no tags set.
Tags added: confirmed
> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Marc Haber writes ("Bug#357978: adduser calls /usr/bin/chfn instead of
invoking chfn from PATH"):
> Hm. We are using hard-coded paths since we avoid using a shell for
> subprocess invocation.
I''m afraid I don''t understand this comment at all.  Honouring
the PATH
just involves calling exec*p rather than exec*, and doesn''t need to
use a subprocess.  The libc will search the PATH for you.
>  We''re going to change to a PATH-honoring setup
> in one of the next versions, but we''re going to set our own PATH
on
> startup to avoid privilege escalation issues.
That''s completely wrong.  adduser is running as root to start with and
isn''t setuid.  It should honour its PATH completely.

Ian.

Your message dated Wed, 14 Jun 2006 10:12:38 +0200
with message-id <20060614081238.GA30478@nechayev.zugschlus.de>
and subject line Bugs fixed in experimental
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

-------------- next part --------------
An embedded message was scrubbed...
From: sysadmin@chiark.greenend.org.uk (Ian Jackson)
Subject: adduser calls /usr/bin/chfn instead of invoking chfn from PATH
Date: Mon, 20 Mar 2006 16:02:21 +0000
Size: 1564
Url:
http://lists.alioth.debian.org/pipermail/adduser-devel/attachments/20060614/c62a19d4/attachment.mht
-------------- next part --------------
An embedded message was scrubbed...
From: Marc Haber <mh+debian-packages@zugschlus.de>
Subject: Bugs fixed in experimental
Date: Wed, 14 Jun 2006 10:12:38 +0200
Size: 2302
Url:
http://lists.alioth.debian.org/pipermail/adduser-devel/attachments/20060614/c62a19d4/attachment-0001.mht

Your message dated Fri, 23 Jun 2006 07:32:07 -0700
with message-id <E1Ftmhb-0004fz-JV@spohr.debian.org>
and subject line Bug#357978: fixed in adduser 3.90
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

-------------- next part --------------
An embedded message was scrubbed...
From: sysadmin@chiark.greenend.org.uk (Ian Jackson)
Subject: adduser calls /usr/bin/chfn instead of invoking chfn from PATH
Date: Mon, 20 Mar 2006 16:02:21 +0000
Size: 1564
Url:
http://lists.alioth.debian.org/pipermail/adduser-devel/attachments/20060623/54f1a677/attachment.mht
-------------- next part --------------
An embedded message was scrubbed...
From: Marc Haber <mh+debian-packages@zugschlus.de>
Subject: Bug#357978: fixed in adduser 3.90
Date: Fri, 23 Jun 2006 07:32:07 -0700
Size: 4528
Url:
http://lists.alioth.debian.org/pipermail/adduser-devel/attachments/20060623/54f1a677/attachment-0001.mht