Control: tags -1 + wontfix

Hello Phil,

On Mon, Oct 12, 2015 at 09:06:20AM -0400, Phil Susi wrote:
> retitle 674486 X apps don't work under su
[...]
> I'm not sure, but I think it has something to do with Debian's su
> package, or its default configuration ( or possibly Xorg ).  We don't
> have this problem with su or sudo on Ubuntu.
(AFAIK ubuntu is still on the src:shadow su, while debian moved over to
src:util-linux version.)

Please see 1/ in
https://lists.debian.org/debian-devel/2018/08/msg00146.html

Also see the (only) followup from X team which is the reason why no
change happened.

For now my recommendation would thus be that anyone that relies on the
old behaviour adds the PAM config snippet on their own (as I'm not
likely to go against the X teams recommendation for the default
behaviour, so without further input this is a wontfix for now).
Alternatively they manually set DISPLAY and XAUTH where needed.

You can find an example line in fedora at:
https://src.fedoraproject.org/rpms/util-linux/blob/master/f/util-linux-su.pamd#_14
You however might want to do the override via the "pam-auth-update" way
on debian/ubuntu.

Extra info:
There are other issues with the default pam configuration in Debian
(eg. #711104), which I think should be fixed in PAM packaging itself
rather than overridden by another (essential) package.
There is someone actively maintaining PAM packaging outside of debian
and the (very slow) discussions about it are in #821408 if someone
wants to help out with review and eventual sponsorship.

Regards,
Andreas Henriksson

Reply via email to