Arch Linux

Please read this before reporting a bug:

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

FS#62847 - [polkit] missing conf backup function for /etc/pam.d/polkit-1

Attached to Project: Arch Linux
Opened by leo poopkin (poop5757) - Saturday, 08 June 2019, 20:18 GMT
Last edited by Jan Alexander Steffens (heftig) - Sunday, 23 February 2020, 00:12 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Jan de Groot (JGC)
Jan Alexander Steffens (heftig)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No


Reinstalling polkit leads to resetting pam configuration for polkit.
File /var/lib/pacman/local/polkit-0.116-1/files have no %BACKUP% section, actually for "/etc/pam.d/polkit-1".

Additional info:
* package version(s)
* config and/or log files etc.
all explained above.
* link to upstream bug report, if any

Steps to reproduce:
* Configure your polkit with /etc/pam.d/polkit-1
* Reinstall polkit
* See, your maybe critical configuration for polkit is lost!!!

I see that sudo package and util-linux package has backup function for files in /etc/pam.d/ so i decide it is high priority bug.

Recently, i tuned polkit to work only with wheel group users, and to have separate admin user who are the only one can do pkexec, su, sudo. After some time with updating my system i test my configuration, and security breach was detected!
This task depends upon

Closed by  Jan Alexander Steffens (heftig)
Sunday, 23 February 2020, 00:12 GMT
Reason for closing:  Fixed
Additional comments about closing:  0.116-5