Package: i3lock
Version: 2.16-1
Severity: important

Hi,

as part of another bug it was brought to my attention that i3lock's 
PAM configuration includes the "login" PAM configuration. This might 
come from upstream.

However, on Debian systems PAM users should not include config from 
other, possibly unrelated, packages, and instead use the common-* 
configuration files, using @include. Please see the PAM docs, 
/etc/pam.d/common-* files and/or samples on how to do that.

I'll also point out that 'login' is not required to be installed 
anymore.

Best,
Chris

Reply via email to