[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#429962: marked as done (libpam-runtime: Please activate pam_foreground by default in common-session)

Your message dated Wed, 26 Aug 2009 08:08:13 +0200
with message-id <20090826060813.GB32182@login2.uio.no>
and subject line Re: Bug#429962: libpam-runtime: Please activate pam_foreground by default in common-session
has caused the Debian Bug report #429962,
regarding libpam-runtime: Please activate pam_foreground by default in common-session
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
429962: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=429962
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: libpam-runtime
Version: 0.79-4

For hal/dbus to know if the request for action is coming from a user
on the console (aka in front of the machine), a method to discover
this is required.  In Redhat the pam_console module is used for this,
but it has a few race conditions.  In Ubuntu the pam_foreground module
is used for this.  It do not have the race problems, and seem like a
better implementation of the same idea.

Getting hal/dbus to properly handle at_console access checks was
requried for Debian Edu, and we implemented this by installing the
libpam-foreground package and modifying /etc/pam.d/common-session to
make it an optional module.  The result should look like this:

  session optional        pam_foreground.so
  session required        pam_unix.so

The change from the current default is the extra pam_foreground.so
line.  Please make this the default configuration for pam.  If the
libpam-foreground is missing, the pam config will still work, and the
only negative effect will be that the at_console access check isn't
working.

Happy hacking,
-- 
Petter Reinholdtsen

--- End Message ---
--- Begin Message --- 
[Steve Langasek]
> libpam-runtime has implemented the described framework, so there's
> nothing more to be changed in pam for this bug.  libpam-foreground
> can be modified to hook into this framework, but I'm not sure that's
> still needed - libpam-foreground is orphaned, and is not the
> preferred mechanism for hooking into hal/dbus anymore, having been
> superseded (AFAIK) by libpam-ck-connector.

I agree that it is no longer needed, and close it.

Happy hacking,
-- 
Petter Reinholdtsen

--- End Message ---
Reply to: