d/control: Don't recommend libpam-tmpdir

- Use of libpam-tmpdir leads to problems installing MariaDB[1][2][3]. A fix for
the serious issues may not be available for next stable release.

- Services run by systemd don't benefit from libpam-tmpdir[4]. So it's effect is
limited to PAM sessions opened with a terminal. Terminal access is mostly for
debugging in FreedomBox and not a primary use case.

- Services are (or will be) protected with PrivateTmp=yes in case of services
running on FreedomBox. This is better protection compared to what libpam-tmpdir
offers.

Links:

1) https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022994

2) https://jira.mariadb.org/browse/MDEV-29910

3) https://salsa.debian.org/mariadb-team/mariadb-server/-/merge_requests/23

4) https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022994#32

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
This commit is contained in:
Sunil Mohan Adapa 2022-12-15 15:46:37 -08:00 committed by James Valleroy
parent bcb0823e7c
commit bb527673fb
No known key found for this signature in database
GPG Key ID: 77C0C75E7B650808

2
debian/control vendored
View File

@ -156,8 +156,6 @@ Recommends:
libnss-mdns,
# Resolve current hostname without /etc/hosts
libnss-myhostname,
# Tighter $TMPDIR permissions
libpam-tmpdir,
# Block repeated failed PAM login attempts
libpam-abl,
# Priority: standard