diff --git a/debian/changelog b/debian/changelog
index 4549a218..09310aa9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,16 @@
+shadow (1:4.5-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload (greetings from DebCamp/DebConf Taiwan).
+  * Stop shipping su and break old util-linux version. (See #833256)
+    - Breaks on old version to force lockstep upgrade, which should
+      really be a depends-new-version (and can be switched around
+      together with util-linux once the transition is finished).
+      Using Breaks/Depends the 'wrong' way around is to make apt
+      unpack things in the 'right' order (avoiding any gaps where
+      /bin/su is not available during the upgrade phase).
+
+ -- Andreas Henriksson <andreas@fatal.se>  Fri, 27 Jul 2018 10:07:37 +0200
+
 shadow (1:4.5-1) unstable; urgency=medium
 
   * New upstream version 4.5
diff --git a/debian/control b/debian/control
index 58f8828e..61c608cc 100644
--- a/debian/control
+++ b/debian/control
@@ -48,7 +48,8 @@ Pre-Depends: ${shlibs:Depends},
              libpam-modules (>= 1.1.8-1)
 Breaks: coreutils (<< 8.21~) [hurd-any],
         passwd (<< 1:4.1.5.1-2~) [hurd-any],
-        hurd (<< 20140206~) [hurd-any]
+        hurd (<< 20140206~) [hurd-any],
+        util-linux (<< 2.32-0.2~)
 Conflicts: gnunet (<< 0.7.0c-2),
            amavisd-new (<< 2.3.3-8),
            python-4suite (<< 0.99cvs20060405-1),
diff --git a/debian/login.install b/debian/login.install
index a031ee7a..71b494bc 100644
--- a/debian/login.install
+++ b/debian/login.install
@@ -2,7 +2,6 @@ usr/share/locale/*/LC_MESSAGES/shadow.mo
 usr/share/man/*/man1/login.1
 usr/share/man/*/man1/newgrp.1
 usr/share/man/*/man1/sg.1
-usr/share/man/*/man1/su.1
 usr/share/man/*/man5/faillog.5
 usr/share/man/*/man5/login.defs.5
 usr/share/man/*/man8/faillog.8
@@ -11,7 +10,6 @@ usr/share/man/*/man8/nologin.8
 usr/share/man/man1/login.1
 usr/share/man/man1/newgrp.1
 usr/share/man/man1/sg.1
-usr/share/man/man1/su.1
 usr/share/man/man5/faillog.5
 usr/share/man/man5/login.defs.5
 usr/share/man/man8/faillog.8
@@ -22,4 +20,3 @@ usr/bin/faillog
 usr/bin/lastlog
 usr/bin/newgrp
 bin/login
-bin/su
diff --git a/debian/rules b/debian/rules
index 3a979378..c651b585 100755
--- a/debian/rules
+++ b/debian/rules
@@ -50,7 +50,6 @@ ifneq ($(DEB_HOST_ARCH_OS),linux)
 	sed -i 's/session    optional   pam_keyinit.so/# Linux only # session    optional   pam_keyinit.so/' debian/login.pam
 endif
 	dh_installpam -p login
-	dh_installpam -p login --name=su
 	install -c -m 444 debian/login.defs debian/login/etc/login.defs
 	install -c -m 444 debian/securetty.$(DEB_HOST_ARCH_OS) debian/login/etc/securetty
 	dh_lintian -p login
@@ -81,7 +80,6 @@ binary-predeb/uidmap::
 binary-predeb/login::
 	# No real need for login to be setuid root
 	# chmod u+s debian/login/bin/login
-	chmod u+s debian/login/bin/su
 	chmod u+s debian/login/usr/bin/newgrp
 
 binary-predeb/passwd::