Package: libpam-systemd
Version: 232-25
Severity: minor
It seems reasonable that non-login users should not have per-user
sessions by default. Using pam_succeed_if to skip creation for users
with /bin/false or /usr/sbin/nologin shells seems reasonable.
IE, the following (currently untested):
Name: Register user sessions in the systemd control group hierarchy
Default: yes
Priority: 0
Session-Interactive-Only: yes
Session-Type: Additional
Session:
[success=2 default=ignore] pam_succeed_if quiet shell = /bin/false
[success=1 default=ignore] pam_succeed_if quiet shell =
/usr/sbin/nologin
optional pam_systemd.so
Alternatively, documenting this workaround in README.Debian might be
good enough.
--
Don Armstrong https://www.donarmstrong.com
Love is... a complex sequence of neurochemical reactions that makes
people behave like idiots. It's similar to intoxication, but the
hangover's even worse.
-- J. Jacques _Questionable Content_ #1039
http://www.questionablecontent.net/view.php?comic=1039
