Translation(s): none


Introduce pam_lastlog2.so in Debian

Bug requesting pam_lastlog2.so: https://bugs.debian.org/1068017 - please use this bug for discussion.

Background: lastlog(8) reads /var/log/lastlog. The data in this file is in a format which does not survive Y2038 (it stores 32bit time_t values). This file is updated directly by sshd, and (in bookworm and earlier) by pam_lastlog.so.

PAM in Debian trixie/sid already dropped pam_lastlog.so, see Debian bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1066060 and upstream https://github.com/linux-pam/linux-pam/commit/357a4ddbe9b4b10ebd805d2af3e32f3ead5b8816 .

As a replacement, util-linux upstream added pam_lastlog2.so. It writes into a new file, in sqlite3 file format.

This wiki page should summarize the required changes in Debian, IF we want to introduce pam_lastlog2.so. The other option is to stop having lastlog(8).

Current status

Option A: move to lastlog2

Package changes (proposed)

Upgrade considerations

Open questions

Option B: drop lastlog

https://xkcd.com/1172/

Open questions

Additional info