You are not logged in.

#1 2020-07-03 19:23:53

carlday
Member
Registered: 2011-10-04
Posts: 45

[SOLVED]Will pacman Upgrade Fail if two /etc/pam.d/files are IMMUTABLE

Setting Up fscrypt filesystem /home for user
have read in fscrypt arch.wiki that pam_fscrypt.so
needs to be in /etc/pam.d/system-login  [owned by pambase]
and /etc/pam.d/passwd [owned by shadow]
  Could config pacman to ignore those packages pambase and shadow.
      But know pambase has not changed in over a year, But some other
package makes changes to /etc/pam.d/system-login.
  iF pam_fscrypt.so is not the above /etc/pam.d/files will not login to deCrypt files??
Not enough fscrypt user for a pacnew file.
TIA

Last edited by carlday (2020-07-07 05:28:17)

Offline

#2 2020-07-03 20:40:44

Trilby
Inspector Parrot
Registered: 2011-11-29
Posts: 29,447
Website

Re: [SOLVED]Will pacman Upgrade Fail if two /etc/pam.d/files are IMMUTABLE

Both of the files you mentioned are in the backup file array of the packages that own them.  Pacman will not attempt to overwrite your modifications.

Last edited by Trilby (2020-07-03 20:41:20)


"UNIX is simple and coherent..." - Dennis Ritchie, "GNU's Not UNIX" -  Richard Stallman

Offline

#3 2020-07-03 20:48:57

twelveeighty
Member
From: Alberta, Canada
Registered: 2011-09-04
Posts: 1,096

Re: [SOLVED]Will pacman Upgrade Fail if two /etc/pam.d/files are IMMUTABLE

I don't think making /etc/pam.d/system-login read-only is the right decision. Are you worried that you would miss the "pacnew" notification if those files were updated and you would get locked out of your home folder?

I'm not following what you mean by "Not enough fscrypt user for a pacnew file" - can you clarify?

Whichever way you approach the problem, you still will have to manually deal with any changes that an upgrade to pambase or shadow will introduce before you reboot?

Offline

#4 2020-07-07 05:21:14

carlday
Member
Registered: 2011-10-04
Posts: 45

Re: [SOLVED]Will pacman Upgrade Fail if two /etc/pam.d/files are IMMUTABLE

Did search on pamBase, creator said arch users helped on that set of files.
Have Post UpGrade scripts [sed,rm] that run, part of scripts on the system-login  file.
Always login to tty, no DM. Can add extra MSG to root login about post-Syu.
Can add a copy of the two pam-files with ending .good for backup for quick fix

Offline

#5 2020-07-07 11:59:02

Trilby
Inspector Parrot
Registered: 2011-11-29
Posts: 29,447
Website

Re: [SOLVED]Will pacman Upgrade Fail if two /etc/pam.d/files are IMMUTABLE

carlday wrote:

Can add a copy of the two pam-files with ending .good for backup for quick fix

What is this a "fix" for?  They are already in the backup array: pacman will not overwrite your content.


"UNIX is simple and coherent..." - Dennis Ritchie, "GNU's Not UNIX" -  Richard Stallman

Offline

#6 2020-07-07 12:25:56

Awebb
Member
Registered: 2010-05-06
Posts: 6,275

Re: [SOLVED]Will pacman Upgrade Fail if two /etc/pam.d/files are IMMUTABLE

I have not encountered a single package that doesn't have files in /etc in the backup array.

Last edited by Awebb (2020-07-07 13:41:30)

Offline

#7 2020-07-07 12:42:25

Trilby
Inspector Parrot
Registered: 2011-11-29
Posts: 29,447
Website

Re: [SOLVED]Will pacman Upgrade Fail if two /etc/pam.d/files are IMMUTABLE

Well, lots of packages have files in /etc that are not in their backup array.  These are just the ones currently installed on my system that meet that criteria:

ca-certificates-utils
dnssec-anchors
e2fsprogs
fakeroot
filesystem
fontconfig
gawk
glibc
gpm
iproute2
iptables
libtirpc
libvdpau
neomutt
openssh
openssl
p11-kit
perl
systemd
texlive-core
tslib
ttf-dejavu

But the files mentioned in this thread are most certainly in backup arrays.

Last edited by Trilby (2020-07-07 12:45:19)


"UNIX is simple and coherent..." - Dennis Ritchie, "GNU's Not UNIX" -  Richard Stallman

Offline

#8 2020-07-07 13:41:00

Awebb
Member
Registered: 2010-05-06
Posts: 6,275

Re: [SOLVED]Will pacman Upgrade Fail if two /etc/pam.d/files are IMMUTABLE

Indeed, Trilby. I just re-read my sentence and completely withdraw my comment.

Offline

Board footer

Powered by FluxBB