https://bugzilla.mindrot.org/show_bug.cgi?id=3723

--- Comment #5 from Damien Miller <[email protected]> ---
Ah, pam_limits.so is session module? That's very late in the stack, and
session modules AFAIK are mostly intended for configuring the session
with things like environment variables and aren't really supposed to
block access.

In particular, a failure of a session module (e.g. pam_limits) is not
specified to be fatal to the session. This is the reason that sshd
doesn't terminate the session when the PAM session initialisation
fails.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to