[Bug 828319] [NEW] shadowconfig uses "pwck -p" and "grpck -p" which aren't actually supported

[Thomas Bushnell, BSG]

Public bug reported:

/sbin/shadowconfig from the passwd package uses "pwck -p" and "grpck
-p". On some other Linux systems, the -p flag to these programs says to
silently fix problems found in those files.

But the Ubuntu Lucid versions do not actually do that.  The Ubuntu Lucid
versions ignore the -p option, and then go ahead and prompt for
confirmation before making changes.

This can be dangerous at install time. If the install image has problems
in the group or passwd files (for example, mention of an unknown user in
the group file), then finish-install's postinst will call 06user-setup,
which calls user-setup-apply, which calls shadowconfig. When that
prompts for input, the install will hang.

This with passwd version 1:4.1.4.2-1ubuntu2.2, which includes
shadowconfig, grpck, and pwck.

** Affects: shadow (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/828319

Title:
  shadowconfig uses "pwck -p" and "grpck -p" which aren't actually
  supported

Status in “shadow” package in Ubuntu:
  New

Bug description:
  /sbin/shadowconfig from the passwd package uses "pwck -p" and "grpck
  -p". On some other Linux systems, the -p flag to these programs says
  to silently fix problems found in those files.

  But the Ubuntu Lucid versions do not actually do that.  The Ubuntu
  Lucid versions ignore the -p option, and then go ahead and prompt for
  confirmation before making changes.

  This can be dangerous at install time. If the install image has
  problems in the group or passwd files (for example, mention of an
  unknown user in the group file), then finish-install's postinst will
  call 06user-setup, which calls user-setup-apply, which calls
  shadowconfig. When that prompts for input, the install will hang.

  This with passwd version 1:4.1.4.2-1ubuntu2.2, which includes
  shadowconfig, grpck, and pwck.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/828319/+subscriptions