Re: Read this before installing sys-apps/gradm-3.0.201407162022

Alexander Tsoy <alexander-EP/[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
В Wed, 23 Jul 2014 11:27:40 +0200
"Tóth Attila" <[email protected]> пишет:

> Just a warning.
> After I bumped sys-apps/gradm from 3.0.201405281853 to
> 3.0.201407162022, I cannot authenticate myself as admin. I get
> "Invalid password" each time I try to authenticate (non-pam).
> Downgrading to the previous version solves the problem. First I
> thought the pw file got corrupted. But it's the new gradm.
> In my case it required booting on a CD using remote console and
> disabling grsec activation on boot in order to be able to downgrade
> gradm, therefore give back the control over my systems.
> 
> BR:
> Dw.

Looks like this was already fixed in git and in a newer gradm snapshot:

https://grsecurity.net/gradm3-changelog.txt

commit 63017cb29510c1ded5308ca0a32b8d33f4c05d7c
Author: Brad Spengler <[email protected]>
Date:   Tue Jul 22 21:16:08 2014 -0400

    fix broken password authentication caused by recent commit
    4b923540573b90c0b2274d510e4948aa9c962775
    
    It was not possible to authenticate to the RBAC system as I misread
    the code and didn't notice it was stripping the trailing newline

-- 
Alexander Tsoy
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.