pam config: not yet including common-session modules

Bug #549172 reported by ceg
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
sudo (Debian)
Fix Released
Unknown
sudo (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

A simple package configuration issue.

PAM modules like pam_umask, limits and pam_env don't work with sudo because no common-session modules are included in sudo's pam config file.

/etc/pam.d/sudo should be shipped containing

@include common-session-noninteracative

If "sudo -i" would really need it, sudo may use and ship two separate configs /etc/pam/sudo-noninteractive and /etc/pam.d/sudo-interactive, and @include common-session in the latter. But I think sudo -i shouldl be fine with using the noninteractive auth process config most of the time.

Sudo seems to support pam sessions modules since version 1.7
http://www.sudo.ws/pipermail/sudo-users/2005-May/002520.html
but they don't get loaded yet.

Revision history for this message
ceg (ceg) wrote :

Sudo seems to be patched to parse /etc/environment itself. With sudo correctly iplementing pam sessions that hack can be reverted.
http://www.sudo.ws/bugs/show_bug.cgi?id=83

ceg (ceg)
description: updated
ceg (ceg)
summary: - common-session pam configuration not included
+ pam config: not yet including common-session modules
ceg (ceg)
description: updated
Changed in sudo (Ubuntu):
status: New → Confirmed
ceg (ceg)
description: updated
Revision history for this message
ceg (ceg) wrote :
Revision history for this message
Lorenzo De Liso (blackz) wrote :

I forwarded your patch to Debian.

tags: added: patch-forwarded-debian
Changed in sudo (Debian):
status: Unknown → New
Changed in sudo (Debian):
status: New → Fix Committed
Revision history for this message
ceg (ceg) wrote :

Thanks Lorenzo.

Changed in sudo (Debian):
status: Fix Committed → Fix Released
ceg (ceg)
Changed in sudo (Ubuntu):
status: Confirmed → Fix Committed
Revision history for this message
Steve Langasek (vorlon) wrote :

this is fixed in precise.

Changed in sudo (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.