Your message dated Fri, 02 Oct 2026 17:38:07 +0000
with message-id <[email protected]>
and subject line Bug#1068378: fixed in xdm 1:1.1.17-3
has caused the Debian Bug report #1068378,
regarding xdm: pam_keyinit is missing from /etc/pam.d/xdm
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1068378: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068378
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: xdm
Version: 1:1.1.11-3+b2
Severity: normal
X-Debbugs-Cc: none, Łukasz Stelmach <[email protected]>
Dear Maintainer,
pam_keyinit is missing from the /etc/pam.d/xdm configuration
file. Therefore, it is not possible to access the session keyring from
programs running in a session started by xdm.
The patch will follow.
PS. Below there is a modifide pam file from my system which makes it
possible to access the session keyring.
-- System Information:
Debian Release: 12.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64, armel
Kernel: Linux 6.5.0-0.deb12.4-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages xdm depends on:
ii cpp 4:12.2.0-3
ii debconf [debconf-2.0] 1.5.82
ii libc6 2.36-9+deb12u4
ii libcrypt1 1:4.4.33-2
ii libpam0g 1.5.2-6+deb12u1
ii libselinux1 3.4-1+b6
ii libx11-6 2:1.8.4-2+deb12u2
ii libxau6 1:1.0.9-1
ii libxaw7 2:1.0.14-1
ii libxdmcp6 1:1.1.2-3
ii libxext6 2:1.3.4-1+b1
ii libxft2 2.3.6-1
ii libxinerama1 2:1.1.4-3
ii libxmu6 2:1.1.3-3
ii libxpm4 1:3.5.12-1.1+deb12u1
ii libxrender1 1:0.9.10-1.1
ii libxt6 1:1.2.1-1.1
ii lsb-base 11.6
ii procps 2:4.0.2-3
ii sysvinit-utils [lsb-base] 3.06-4
ii x11-utils 7.7+5
ii x11-xserver-utils 7.7+9+b1
xdm recommends no packages.
xdm suggests no packages.
-- Configuration Files:
/etc/pam.d/xdm changed:
auth requisite pam_nologin.so
auth required pam_env.so
auth required pam_env.so envfile=/etc/default/locale
session [success=ok ignore=ignore module_unknown=ignore default=bad]
pam_selinux.so close
session required pam_loginuid.so
session optional pam_keyinit.so force revoke
session [success=ok ignore=ignore module_unknown=ignore default=bad]
pam_selinux.so open
session required pam_limits.so
@include common-auth
@include common-account
@include common-session
@include common-password
-- debconf information:
* shared/default-x-display-manager: xdm
xdm/daemon_name: /usr/bin/xdm
xdm/stop_running_server_with_children: false
--
Łukasz Stelmach
Samsung R&D Institute Poland
Samsung Electronics
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: xdm
Source-Version: 1:1.1.17-3
Done: Boyuan Yang <[email protected]>
We believe that the bug you reported is fixed in the latest version of
xdm, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Boyuan Yang <[email protected]> (supplier of updated xdm package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 02 Oct 2026 13:10:50 -0400
Source: xdm
Architecture: source
Version: 1:1.1.17-3
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <[email protected]>
Changed-By: Boyuan Yang <[email protected]>
Closes: 832351 1068378
Changes:
xdm (1:1.1.17-3) unstable; urgency=medium
.
* debian/xdm.postrm.in: On purge, remove the
/etc/systemd/system/display-manager.service symlink if it still
points at xdm.service; fixes piuparts failure in sid-strict.
(Closes: #832351)
* debian/xdm.pam: Add pam_keyinit session module (force revoke) so
that a fresh session keyring is created on login, as sshd and other
display managers do. Thanks to Łukasz Stelmach. (Closes: #1068378)
* debian/gbp.conf: Set compression = xz to match the tarballs stored
in the pristine-tar branch.
* debian/control: Bump debhelper compat to v14.
* debian/control: Drop Priority: optional.
* debian/control: Use non-obsolete build-dep package name libselinux-dev.
* debian/control: Drop unused build-dep quilt.
* debian/rules: Stop using the xsfbs patch/unpatch targets. With source
format 3.0 (quilt), dpkg-source applies the patches already, and the
xsfbs targets required quilt at build and clean time.
Checksums-Sha1:
c65f65dd17cfb486c62931a788eb80b815831e18 2629 xdm_1.1.17-3.dsc
cd79d094a2002659fb2de5e8f94592783b23f391 425804 xdm_1.1.17.orig.tar.xz
364e388e955d56dece3a405feb9486d32f99bf16 58712 xdm_1.1.17-3.debian.tar.xz
201389de30f953621f175f9e9153b16d3e4be59c 7686 xdm_1.1.17-3_amd64.buildinfo
Checksums-Sha256:
b9cc570534d1b4f4e622df06f30debf76dc852e421445a1ddd856ef501dcb76d 2629
xdm_1.1.17-3.dsc
9494aef0911a031c53670725b5c8c9bb9d3f7c5ea7318b1f72ddd9dcbbeceb6a 425804
xdm_1.1.17.orig.tar.xz
7682fd7eb2308cc0a4dd4ce0737148768de69116d28bc0e884cd9be285d37b54 58712
xdm_1.1.17-3.debian.tar.xz
32f801156bfd093c540d5fab7d5e620abcaa8e2564572ab5732415993eeaf4c7 7686
xdm_1.1.17-3_amd64.buildinfo
Files:
c907857bff6c4dd249b6196c7c5bfd45 2629 x11 optional xdm_1.1.17-3.dsc
e918d273f714098fb409457e37d328ce 425804 x11 optional xdm_1.1.17.orig.tar.xz
60b1e0820d37bc0ebe93f3bff840b6b6 58712 x11 optional xdm_1.1.17-3.debian.tar.xz
6443d492031a340bc9fafd0c5664083d 7686 x11 optional xdm_1.1.17-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEfncpR22H1vEdkazLwpPntGGCWs4FAmq/5fQACgkQwpPntGGC
Ws4WdQ//e47JOEY7+8GmWeOQKPD7Z3PAQMUs57ksyZoR7ciYmBu9ikdcE8R1R2Fs
xOpGebYjmd501ftukCOeaLUrAxK0hoJ/0eMxXmlqoAkMVqCFsW004SPMl3d/GOE8
yCUWHoiN08trZLeoF6uXJAxEizuq5OZMHkh6IuhXuiFz+WQo0UTz+WJ1Tk7VeI64
kLSy3+dn5PztI1ZqOlnVP3IzmP73vUp17JXkdkVtsRHluCGnAsl5Ih64MLPyIRQD
d4Shm6NPTkPTu5sTCG9vJIZWjLeE/6R3N73WuspaVtebkP5ybZEtm/fX/C9I1vXH
grmNh5WkAuY8L9j3IsbgxCR91Ld7cxZjrFPgV3w+24TIzg2NxA6p/88eCSIIMgaj
i/Wcaj6mB0WZfVvkA8fMSCrkV3YWMDJPjhSPcQyqxbsHzTmreLAu2VrK+qAMqIMW
hRXFH4LQjLMJ8zBzbP/HaQyTAYXCIQ8+ZyY4hfRda2T3Bs3d1nQS7QEBj84eUo/m
+9WW/6p/x1BfppMm2sFbjfUesYGtpJPZjHH1EpPt/1aA+7Q4dpw5zXVrQJX+TJYU
45cmKJjewbwLiJHA6JVRxIQBMzLf+U7A2B4M3nIxAXIPzF03S4jpHJPjAqgOrQzk
TcwHQyMO7OHzaHFtCBQOW3LpANPP1oFCjy4QBtoSEmcS6IKX0FI=
=o4PJ
-----END PGP SIGNATURE-----
pgpIT1IGfsT1n.pgp
Description: PGP signature
--- End Message ---
