Debian Bug report logs - #873623
sudo: occasionally stalls infinitely instead of running command

version graph

Package: sudo; Maintainer for sudo is Sudo Maintainers <sudo@packages.debian.org>; Source for sudo is src:sudo (PTS, buildd, popcon).

Reported by: Thorsten Glaser <tg@mirbsd.de>

Date: Tue, 29 Aug 2017 15:42:02 UTC

Severity: grave

Found in version sudo/1.8.21-1

Fixed in version sudo/1.8.21p2-1

Done: Bdale Garbee <bdale@gag.com>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Bdale Garbee <bdale@gag.com>:
Bug#873623; Package sudo. (Tue, 29 Aug 2017 15:42:04 GMT) (full text, mbox, link).

Acknowledgement sent to Thorsten Glaser <tg@mirbsd.de>:
New Bug report received and forwarded. Copy sent to Bdale Garbee <bdale@gag.com>. (Tue, 29 Aug 2017 15:42:04 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Thorsten Glaser <tg@mirbsd.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: sudo: occasionally stalls infinitely instead of running command
Date: Tue, 29 Aug 2017 17:38:43 +0200
Package: sudo
Version: 1.8.21-1
Severity: grave
Justification: renders package unusable

After an upgrade from 1.8.20p2-1 sudo became somewhat unusable:

[…]
Processing triggers for menu (2.1.47) ...
[master 2a7cfae] committing changes in /etc after apt run
 9 files changed, 20 insertions(+), 8 deletions(-)
 rename rc0.d/{K01avahi-daemon => K02avahi-daemon} (100%)
 rename rc1.d/{K01avahi-daemon => K02avahi-daemon} (100%)
 rename rc6.d/{K01avahi-daemon => K02avahi-daemon} (100%)
sudo: obsolete-conffile /etc/sudoers.dist
N: Download is performed unsandboxed as root as file '/home/tglase/Projekte/DebTarent/dists/sid/wtf/Pkgs/mksh/mksh_56b+wtf1_x32.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
tglase@tglase:~ $ sudo rm /etc/sudoers.dist
[sudo] password for tglase:
^Ctglase@tglase:~ $ sudo -K
tglase@tglase:~ $ sudo rm /etc/sudoers.dist
[sudo] password for tglase:
rm: cannot remove '/etc/sudoers.dist': No such file or directory
1|tglase@tglase:~ $ sudo true
tglase@tglase:~ $ sudo ls
Bilder  Lesen     U    libxml2_2.7.8.dfsg-2+squeeze16.diff.gz  licenses  sirc.log  uw-imap  y
GPX     Projekte  UU   libxml2_2.7.8.dfsg-2+squeeze16.dsc      mail      stuff     x
Kana    TODO      UUU  libxml2_2.7.8.dfsg.orig.tar.gz          mbsd      tmp       x-git
tglase@tglase:~ $ sudo true
tglase@tglase:~ $ sudo true
tglase@tglase:~ $ sudo true
tglase@tglase:~ $ sudo true
tglase@tglase:~ $ sudo true
^[[A
^Ctglase@tglase:~ $ 

Basically, sometimes, it doesn’t come back from the command
(confirmed by running “sudo ls” a couple of times in succession)
making it unreliable and impossible to use from a script.

-- System Information:
Debian Release: buster/sid
  APT prefers unreleased
  APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386, amd64

Kernel: Linux 4.11.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)

Versions of packages sudo depends on:
ii  libaudit1       1:2.7.7-1+b2
ii  libc6           2.24-17
ii  libpam-modules  1.1.8-3.6
ii  libpam0g        1.1.8-3.6
ii  libselinux1     2.6-3+b2
ii  lsb-base        9.20170808

sudo recommends no packages.

sudo suggests no packages.

-- Configuration Files:
/etc/sudoers [Errno 13] Permission denied: '/etc/sudoers'
/etc/sudoers.d/README [Errno 13] Permission denied: '/etc/sudoers.d/README'
/etc/sudoers.dist [Errno 2] No such file or directory: '/etc/sudoers.dist'

-- no debconf information

Information forwarded to debian-bugs-dist@lists.debian.org, Bdale Garbee <bdale@gag.com>:
Bug#873623; Package sudo. (Tue, 29 Aug 2017 23:51:04 GMT) (full text, mbox, link).

Acknowledgement sent to Alban Browaeys <prahal@yahoo.com>:
Extra info received and forwarded to list. Copy sent to Bdale Garbee <bdale@gag.com>. (Tue, 29 Aug 2017 23:51:04 GMT) (full text, mbox, link).

Message #10 received at 873623@bugs.debian.org (full text, mbox, reply):

From: Alban Browaeys <prahal@yahoo.com>
To: Debian Bug Tracking System <873623@bugs.debian.org>
Subject: Re: sudo: occasionally stalls infinitely instead of running command
Date: Wed, 30 Aug 2017 01:47:54 +0200
Package: sudo
Version: 1.8.21-1
Followup-For: Bug #873623

This is likely sssd related.

I upgraded both today (sssd to 1.15.3-1) and "sudo ls" output was empty.
Local workaround was to comment out "sss" on /etc/nsswitch.conf "sudoers:"
sudoers:        files sss
to
sudoers:        files #sss

Hinted from "pkexec strace -f sudo ls" output:
connect(4, {sa_family=AF_UNIX, sun_path="/var/lib/sss/pipes/sudo"}, 110) = -1 ECONNREFUSED (Connection refused)


Best regards,
Alban



-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'stable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.11.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sudo depends on:
ii  libaudit1       1:2.7.7-1+b2
ii  libc6           2.24-17
ii  libpam-modules  1.1.8-3.6
ii  libpam0g        1.1.8-3.6
ii  libselinux1     2.6-3+b2
ii  lsb-base        9.20170808

sudo recommends no packages.

sudo suggests no packages.

-- Configuration Files:
/etc/sudoers [Errno 13] Permission non accordée: '/etc/sudoers'
/etc/sudoers.d/README [Errno 13] Permission non accordée: '/etc/sudoers.d/README'

-- no debconf information

Information forwarded to debian-bugs-dist@lists.debian.org, Bdale Garbee <bdale@gag.com>:
Bug#873623; Package sudo. (Wed, 30 Aug 2017 03:09:03 GMT) (full text, mbox, link).

Message #13 received at 873623@bugs.debian.org (full text, mbox, reply):

From: Bob Proulx <bob@proulx.com>
To: Alban Browaeys <prahal@yahoo.com>, 873623@bugs.debian.org, 873623-submitter@bugs.debian.org
Subject: Re: Bug#873623: sudo: occasionally stalls infinitely instead of running command
Date: Tue, 29 Aug 2017 20:56:45 -0600
Alban Browaeys wrote:
> This is likely sssd related.
> 
> I upgraded both today (sssd to 1.15.3-1) and "sudo ls" output was empty.
>
> Local workaround was to comment out "sss" on /etc/nsswitch.conf "sudoers:"
> sudoers:        files sss
> to
> sudoers:        files #sss

While sss might be involved additionally I reproduce the problem on my
system and I do not have sssd installed at all.  The sudo problem is
independent of sssd.  There is no sssd installed on my system which
also exhibits the sudo hang problem.

Bob

Message sent on to Thorsten Glaser <tg@mirbsd.de>:
Bug#873623. (Wed, 30 Aug 2017 03:09:04 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Bdale Garbee <bdale@gag.com>:
Bug#873623; Package sudo. (Wed, 30 Aug 2017 12:09:05 GMT) (full text, mbox, link).

Acknowledgement sent to Thorsten Glaser <t.glaser@tarent.de>:
Extra info received and forwarded to list. Copy sent to Bdale Garbee <bdale@gag.com>. (Wed, 30 Aug 2017 12:09:05 GMT) (full text, mbox, link).

Message #21 received at 873623@bugs.debian.org (full text, mbox, reply):

From: Thorsten Glaser <t.glaser@tarent.de>
To: Bob Proulx <bob@proulx.com>
Cc: Alban Browaeys <prahal@yahoo.com>, 873623@bugs.debian.org
Subject: Re: Bug#873623: sudo: occasionally stalls infinitely instead of running command
Date: Wed, 30 Aug 2017 11:55:06 +0000 (UTC)
Bob Proulx dixit:

>independent of sssd.  There is no sssd installed on my system which
>also exhibits the sudo hang problem.

Same for me, no sssd. My nsswitch.conf has no sudoers entry, just:

-----cutting here may damage your screen surface-----
# $Id: nsswitch.conf 432 2009-06-30 11:31:23Z tglase $

passwd:		compat #ldap
group:		compat #ldap
shadow:		compat #ldap

hosts:		files dns
networks:	files

protocols:	db files
services:	db files
ethers:		db files
rpc:		db files

netgroup:	nis
-----cutting here may damage your screen surface-----

bye,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-235
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg

Information forwarded to debian-bugs-dist@lists.debian.org, Bdale Garbee <bdale@gag.com>:
Bug#873623; Package sudo. (Wed, 06 Sep 2017 17:51:03 GMT) (full text, mbox, link).

Message #24 received at 873623@bugs.debian.org (full text, mbox, reply):

From: Christoph Berg <myon@debian.org>
To: 873623@bugs.debian.org
Subject: Re: Bug#873623: sudo: occasionally stalls infinitely instead of running command
Date: Wed, 6 Sep 2017 19:47:57 +0200
Re: Thorsten Glaser 2017-08-29 <150402112366.4803.7797051343542216967.reportbug@tglase.lan.tarent.de>
> Package: sudo
> Version: 1.8.21-1
> Severity: grave
> Justification: renders package unusable
> 
> After an upgrade from 1.8.20p2-1 sudo became somewhat unusable:

Confirmed. It's very easy to reproduce:

$ while date; do sudo true; done
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
Mi 6. Sep 19:42:54 CEST 2017
^CMi 6. Sep 19:42:58 CEST 2017
Mi 6. Sep 19:42:58 CEST 2017
^CMi 6. Sep 19:42:59 CEST 2017

strace: Process 20436 attached
restart_syscall(<... resuming interrupted poll ...>

Christoph

Reply sent to Bdale Garbee <bdale@gag.com>:
You have taken responsibility. (Thu, 07 Sep 2017 17:36:19 GMT) (full text, mbox, link).

Notification sent to Thorsten Glaser <tg@mirbsd.de>:
Bug acknowledged by developer. (Thu, 07 Sep 2017 17:36:19 GMT) (full text, mbox, link).

Message #29 received at 873623-close@bugs.debian.org (full text, mbox, reply):

From: Bdale Garbee <bdale@gag.com>
To: 873623-close@bugs.debian.org
Subject: Bug#873623: fixed in sudo 1.8.21p2-1
Date: Thu, 07 Sep 2017 17:34:59 +0000
Source: sudo
Source-Version: 1.8.21p2-1

We believe that the bug you reported is fixed in the latest version of
sudo, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 873623@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bdale Garbee <bdale@gag.com> (supplier of updated sudo package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 07 Sep 2017 10:42:19 -0600
Source: sudo
Binary: sudo sudo-ldap
Architecture: source amd64
Version: 1.8.21p2-1
Distribution: unstable
Urgency: medium
Maintainer: Bdale Garbee <bdale@gag.com>
Changed-By: Bdale Garbee <bdale@gag.com>
Description:
 sudo       - Provide limited super user privileges to specific users
 sudo-ldap  - Provide limited super user privileges to specific users
Closes: 873561 873600 873623 874000
Changes:
 sudo (1.8.21p2-1) unstable; urgency=medium
 .
   * new upstream version, closes: #873623, #873600, #874000
   * remove legacy /etc/sudoers.dist we no longer deliver, closes: #873561
Checksums-Sha1:
 c2202d151de0ab8a511f44315951ce50f5dd5816 1984 sudo_1.8.21p2-1.dsc
 1a2410517a5e7b74f422b120adedf508b346df66 2976081 sudo_1.8.21p2.orig.tar.gz
 da1a97595f92cbdb362e423426493f53eca59cf4 23768 sudo_1.8.21p2-1.debian.tar.xz
 c5fdcf948e7388245192c5c7b9c3da56cc665d6d 786258 sudo-dbgsym_1.8.21p2-1_amd64.deb
 ea9c349c4c8e09475e03bf7bb652cf18775e3727 806982 sudo-ldap-dbgsym_1.8.21p2-1_amd64.deb
 0289a7f4f66a6edea71bce60545408d6d5d5db58 1134162 sudo-ldap_1.8.21p2-1_amd64.deb
 12dc986bba48ae7c8bbc82dcbdad9ce41b985818 6915 sudo_1.8.21p2-1_amd64.buildinfo
 a215f4d4af17e1a61c3ed84d8edc94dc06e3b056 1104106 sudo_1.8.21p2-1_amd64.deb
Checksums-Sha256:
 d123809b30903236f0fca89054a803fc817d8c0fc1c6a5bc40949101653fdc1d 1984 sudo_1.8.21p2-1.dsc
 74c5746cd33a814e2431c39faf0d76f7f8a697379bd073862e3b156cf0d76368 2976081 sudo_1.8.21p2.orig.tar.gz
 caf91a71c1d81de79a43dbfa06c3245d45fe8adad2c8f947807960b6bbffef9d 23768 sudo_1.8.21p2-1.debian.tar.xz
 6034ed9cd3c42568cf107ab5856396528ecf7644368ff0290b2af2bc23d75797 786258 sudo-dbgsym_1.8.21p2-1_amd64.deb
 a2cd6f5388450f80fe19ae275aff139ae962d0bfe4778381c284210174957e2a 806982 sudo-ldap-dbgsym_1.8.21p2-1_amd64.deb
 41ae9ca30b883f98bd69b03baebe04fb35a245597b45dc081d6b6ff4b23cfcc4 1134162 sudo-ldap_1.8.21p2-1_amd64.deb
 9e8960fe1d491241878ebfc5dfae252699b17f3d5accec0ba139e1a0784b6657 6915 sudo_1.8.21p2-1_amd64.buildinfo
 8992b71d608b960baf85534dcc75a205554028e04e74eea8a1a261f73ad7f3b0 1104106 sudo_1.8.21p2-1_amd64.deb
Files:
 6bf2caf43b57eba5b69777806075a989 1984 admin optional sudo_1.8.21p2-1.dsc
 cd3993d910c713ae72e94beebd230b22 2976081 admin optional sudo_1.8.21p2.orig.tar.gz
 54eecf16e944bbb0449fa6f3506aa41a 23768 admin optional sudo_1.8.21p2-1.debian.tar.xz
 ea9e8bf08873720cc79334c1838c4301 786258 debug extra sudo-dbgsym_1.8.21p2-1_amd64.deb
 858bda30f466789d8956c9999faf8010 806982 debug extra sudo-ldap-dbgsym_1.8.21p2-1_amd64.deb
 04e14fbc5ef6a7ab73821f6d3700a810 1134162 admin optional sudo-ldap_1.8.21p2-1_amd64.deb
 37ef8204ddac6e920193c43451b2eb03 6915 admin optional sudo_1.8.21p2-1_amd64.buildinfo
 cb2d023b2b32e36ddab4e3d32842d11c 1104106 admin optional sudo_1.8.21p2-1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEhHDyCwYlkhh8unuzOpNhlsCV2UEFAlmxfb4ACgkQOpNhlsCV
2UF69RAAn5pW8jyIF3JJ2wIgvb+mSCXfoeHIKWjNmSggrRIgGj9SRAONRJBN4VWK
K7QEhHPolhj8uMBjcCrOusJ8E1hQbu14hgENvscabAfQSRlaFyrINy8U6NDnV19B
YHz7qKvSYhjzTFN8yN81Gi2iKVq9eWXhD564p1f0hzB6B8xuN7GqOhGUVo8KKcTe
hb7EZCEJoLnCsW/rr2jJCZr8F/J0TkIWUypjhAVa5EaDee1EDUeiBWB1aba3VquK
03DBKt8kbgZFX7zBQtW2gRcxF3cJuujHOtMdK9pOubdCpeW3aSiY8SnjcqM4Pt4t
tDMevBJzA3cQ7mRI4wnTrxlpBACXwro5hppwj1zSbazvHOlqREFLnJxL0ql15iYp
+sqPOLsV9fsMnruif5sl0PYzaAUt9hxtpthyb0siWC2ZW4KSRIozI1fW2EkGc7mP
4kFfHgh3TguxEZ459SDuynEtYdYcrycs8ZCm0EbjrDSbrqSIdJWzpDfAOu2TbNYD
ge00Vb0y7nbv8dPw3kUh4RFne7OGUm/S9SMonqJsA3x77FX+LkMPBZ5I8Az510ki
32svZMKvsudTvgYAM6pDJEiWdXvjbaRqfG0ThDuVOdpmC05Rfum7b9FKGXe+f+k9
iSiDeAFTZKbBfMXoQuiWzfR3bVBMuSMAyQdlVhIAx1RpbPYp8/A=
=bz9t
-----END PGP SIGNATURE-----

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 07 Oct 2017 07:27:07 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sat Jan 13 12:41:38 2024; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.