Hello all,

Randy McMurchy wrote:

> Hi all,
> 
> For those of you that have Shadow and PAM installed, could you please
> test something? Please test trying to 'su' to any user, with or without
> the - on the su command, and *intentionally* type an incorrect password.
> 

Something other is coming up.
For some reason the closing if a session when the service is "login" is not
performed, unless you add "CLOSE_SESSIONS yes" to login.defs. If it is
omitted, the default will be used, which is no. Nobody noticed this before?

Some time ago I wrote about it here, and DJ Lucas adviced me to notice the
shadow maillist about it. So I did. Now the developer(s) took it seriously,
and in the next release 4.0.12 this option is removed. 

Look in the source of login.c and look for "CLOSE_SESSIONS".
Also look the note. 


Stef Bon
-- 
http://linuxfromscratch.org/mailman/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to