Package: sudo

PAM modules like pam_umask, limits and pam_env don't work with sudo
because no common-session modules are included in sudo's pam config
file.

/etc/pam.d/sudo should be shipped containing the following line:

@include common-session-noninteracative

If "sudo -i" would really need it, sudo may use and ship two separate
configs /etc/pam/sudo-noninteractive and /etc/pam.d/sudo-interactive,
and @include common-session in the latter. But sudo -i should
be fine with using the noninteractive auth process config most of the
time.

Sudo seems to support pam sessions modules since version 1.7
http://www.sudo.ws/pipermail/sudo-users/2005-May/002520.html
but they don't get loaded yet.

BTW:
Sudo seems to be patched to parse /etc/environment itself. With sudo
correctly iplementing pam sessions that hack can be reverted.
http://www.sudo.ws/bugs/show_bug.cgi?id=83



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to