[Bug 1567473] Re: s390-tools: missing ts-shell

[Brian Murray]

Hello bugproxy, or anyone else affected,

Accepted s390-tools into xenial-proposed. The package will build now and
be available at
https://launchpad.net/ubuntu/+source/s390-tools/1.34.0-0ubuntu8.1 in a
few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Changed in: s390-tools (Ubuntu Xenial)
       Status: In Progress => Fix Committed

** Tags added: verification-needed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to s390-tools in Ubuntu.
https://bugs.launchpad.net/bugs/1567473

Title:
  s390-tools: missing ts-shell

Status in Ubuntu on IBM z Systems:
  In Progress
Status in s390-tools package in Ubuntu:
  Fix Released
Status in s390-tools source package in Xenial:
  Fix Committed

Bug description:
  [Impact]

   * /var/log/ts-shell has wrong permissions, and thus prevents ts-shell
  operation.

  [Test Case]

   * /var/log/ts-shell should be:
  drwxrws--T  2 root ts-shell

  ==

  s390-tools: missing ts-shell

  ts-shell is part of the s390-tools package (see here
  http://www.ibm.com/developerworks/linux/linux390/s390-tools-
  overview.html)

  ts-shell is a terminal server shell to authorize and control IUCV
  terminal connections for individual Linux users. It is currently still
  missing in the Ubuntu Beta version (4.4.0-15-generic #31-Ubuntu SMP
  Fri Mar 18 19:07:12 UTC 2016 s390x).

  The preferred integration of ts-shell is through a subpackage.  The
  ts-shell is required on a particular Linux instance only, that it is
  the terminal server.  Other Linux instances might not need to install
  ts-shell.

  Apart from the installing ts-shell, further configuration files and
  steps are required:

  1. Install and package these configuration files:

  /etc/iucvterm/ts-audit-systems.conf
  /etc/iucvterm/ts-authorization.conf
  /etc/iucvterm/ts-shell.conf
  /etc/iucvterm/unrestricted.conf

  2. Install additional documentation files for the ts-shell, that are
  included in the "iucvterm/doc/ts-shell" in the s390-tools source
  directory.

  3. System configuration for ts-shell.

  - (optional) Register ts-shell as shell by adding it to /etc/shells.
  - Create a ts-shell group.
  - Ensure the configuration files from 1. are readable by the ts-shell group.
  - Create the /var/log/ts-shell directory to store audit logs; the ts-shell group should have read/write access to this directory, implemented as set-group-ID

  4. Optional.  The ts-shell subpackage must depend on s390-tools
  because it requires iucvconn. Further, the subpackage should add a
  Recommends to either Term::ReadLine::Gnu or Term::ReadLine::Perl.

  Below is an excpert from the README.ts-shell to create ts-shell user
  accounts.  These information should help to better understand the
  configuration steps above:

  Setup considerations for the terminal server shell (ts-shell)
  -------------------------------------------------------------
  Adding new ts-shell users
  ~~~~~~~~~~~~~~~~~~~~~~~~~
  The ts-shell installation creates a system group ts-shell.
  If you intend to use ts-shell as a login shell for users, ensure that
  these users are all members of ts-shell.  To add existing users to
  group ts-shell, use +usermod -G ts-shell 'username'+.

  The ts-shell configuration files and `/var/log/ts-shell` are
  readable only by members of the *ts-shell* group.

  Enabling terminal session transcripts
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  ts-shell(1) can be configured to create transcripts of terminal sessions
  to particular z/VM guest virtual machines. The transcripts are written
  to log files in the `/var/log/ts-shell` directory.

  NOTE:   The `/var/log/ts-shell` directory permission has the
          set-group-ID bit set. Sub-directories that are created by
          different users will inherit the group ownership of the
          `/var/log/ts-shell` directory.

  See the ts-shell(1) manual page for more information about terminal
  session transcripts.

  For further details, see
  http://public.dhe.ibm.com/software/dw/linux390/docu/l4n0ht01.pdf

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1567473/+subscriptions