Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 752060 - sys-auth/pambase-20201028.1 pam_faillock(su:auth): Error opening the tally file for root: No such file or directory
Summary: sys-auth/pambase-20201028.1 pam_faillock(su:auth): Error opening the tally fi...
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Mikle Kolyada (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-10-31 22:18 UTC by Chris Henhawke
Modified: 2020-11-01 21:13 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Henhawke 2020-10-31 22:18:20 UTC
unmodified pam config, upgraded to pam 1.4.0.

mate-screensaver tells me "not permitted to gain access at this time" when i enter an incorrect password.

su tells me "permission denied" instead of "su authentication error" when i enter an incorrect password. (whether either or is the better message i'll leave up to the reader)

auth.log is full of entries saying it can't open the tally files.  the man page for faillog says they should go in a directory in /var/run, except that directory gets wiped on every boot since it's symlinked to /run, and it doesn't get auto-created on boot.

Reproducible: Always

Steps to Reproduce:
1. upgrade to pam 1.4.0
2. log in and out a bunch of times, or lock an X session
3. read auth.log
Actual Results:  
errors in auth.log

Expected Results:  
no errors in auth.log
Comment 1 Chris Henhawke 2020-10-31 22:19:18 UTC
s/faillog/faillock
Comment 2 Chris Henhawke 2020-10-31 23:49:27 UTC
apologies, its not from the pam update, but rather pambase
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-11-01 00:16:58 UTC
Is your tmpfiles implementation working?
Comment 4 Chris Henhawke 2020-11-01 00:44:31 UTC
It wasn't, apparently.  Didn't know I needed it.  Fixed that and rebooted, unfortunately no change.
Comment 5 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-11-01 00:45:23 UTC
(In reply to Chris Henhawke from comment #4)
> It wasn't, apparently.  Didn't know I needed it.  Fixed that and rebooted,
> unfortunately no change.

Please ensure:
1) It is in your default run level (or enabled with systemd)
2) Started
3) 'dispatch-conf' returns nothing.
Comment 6 Chris Henhawke 2020-11-01 00:48:49 UTC
I don't use systemd, but rather openrc.

gazelle ~ # dispatch-conf 
gazelle ~ # /etc/init.d/opentmpfiles-dev status
 * status: started
gazelle ~ # /etc/init.d/opentmpfiles-setup status
 * status: started
Comment 7 Chris Henhawke 2020-11-01 00:53:38 UTC
Actually scratch that, it fixed the faillock stuff, but didn't fix the error messages changing.  Sorry for the bugspam
Comment 8 Chris Henhawke 2020-11-01 21:13:35 UTC
Should I file another bug for all the error messages changing, or will that be fixed in another update?  Thanks