Package: libpam-modules
Version: 1.0.1-1
Severity: normal

I use xscreensaver to lock my screen, and while this works OK I get
the following warnings in syslog when unlocking the screen:

  Aug  1 18:43:33 abc xscreensaver[7872]: pam_unix(xscreensaver:auth): access 
denied: tty ':0.0' is not secure !

/etc/pam.d/xscreensaver contains:

  @include common-auth
  @include common-account

and common-auth has

  auth    required        pam_unix.so nullok_secure

I can get rid of the warning by replacing the "@include common-auth"
with "auth    required        pam_unix.so".

The reason for the warning is that pam_unix/support.c uses
_pammodutil_tty_secure() to check if the tty is secure, and
resets the nullok option if it isn't. And _pammodutil_tty_secure()
in pam_securetty/tty_secure.c emits the warning. So the warning is
emitted even if the account password is non-null.

Both _pammodutil_tty_secure() and the nullok_secure option
were added by Debian patches.


Thanks,
Johannes


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=C, LC_CTYPE=de_DE.utf-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libpam-modules depends on:
ii  libc6                         2.7-13     GNU C Library: Shared libraries
ii  libdb4.6                      4.6.21-10  Berkeley v4.6 Database Libraries [
ii  libpam0g                      1.0.1-1    Pluggable Authentication Modules l
ii  libselinux1                   2.0.65-2   SELinux shared libraries

libpam-modules recommends no packages.

libpam-modules suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to