Control: tags -1 + wontfix Hello Phil,
On Mon, Oct 12, 2015 at 09:06:20AM -0400, Phil Susi wrote: > retitle 674486 X apps don't work under su [...] > I'm not sure, but I think it has something to do with Debian's su > package, or its default configuration ( or possibly Xorg ). We don't > have this problem with su or sudo on Ubuntu. (AFAIK ubuntu is still on the src:shadow su, while debian moved over to src:util-linux version.) Please see 1/ in https://lists.debian.org/debian-devel/2018/08/msg00146.html Also see the (only) followup from X team which is the reason why no change happened. For now my recommendation would thus be that anyone that relies on the old behaviour adds the PAM config snippet on their own (as I'm not likely to go against the X teams recommendation for the default behaviour, so without further input this is a wontfix for now). Alternatively they manually set DISPLAY and XAUTH where needed. You can find an example line in fedora at: https://src.fedoraproject.org/rpms/util-linux/blob/master/f/util-linux-su.pamd#_14 You however might want to do the override via the "pam-auth-update" way on debian/ubuntu. Extra info: There are other issues with the default pam configuration in Debian (eg. #711104), which I think should be fixed in PAM packaging itself rather than overridden by another (essential) package. There is someone actively maintaining PAM packaging outside of debian and the (very slow) discussions about it are in #821408 if someone wants to help out with review and eventual sponsorship. Regards, Andreas Henriksson

