Bug#868359: libpam-systemd should maybe not fire on non-login users

2017-07-14 Thread Don Armstrong
Package: libpam-systemd
Version: 232-25
Severity: minor

It seems reasonable that non-login users should not have per-user
sessions by default. Using pam_succeed_if to skip creation for users
with /bin/false or /usr/sbin/nologin shells seems reasonable.

IE, the following (currently untested):

Name: Register user sessions in the systemd control group hierarchy
Default: yes
Priority: 0
Session-Interactive-Only: yes
Session-Type: Additional
Session:
[success=2 default=ignore] pam_succeed_if quiet shell = /bin/false
[success=1 default=ignore] pam_succeed_if quiet shell = 
/usr/sbin/nologin
optionalpam_systemd.so


Alternatively, documenting this workaround in README.Debian might be
good enough.

-- 
Don Armstrong  https://www.donarmstrong.com

Love is... a complex sequence of neurochemical reactions that makes
people behave like idiots. It's similar to intoxication, but the
hangover's even worse.
 -- J. Jacques _Questionable Content_ #1039
http://www.questionablecontent.net/view.php?comic=1039

___
Pkg-systemd-maintainers mailing list
Pkg-systemd-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-systemd-maintainers


Bug#845480: /bin/ps depends on /usr/lib/... which makes the system unbootable

2016-11-30 Thread Don Armstrong
On Wed, 30 Nov 2016, Klaus Ethgen wrote:
> No, it worked well for decades and it was exactly why you have small
> root and resizable /usr on other medias.

It worked because of extraordinary effort by DDs to continuously migrate
libraries from /usr to / any time a binary or library in /bin, /sbin, or
/lib grew a new feature.

And that's not why it existed in the first place, either. See:
http://lists.busybox.net/pipermail/busybox/2010-December/074114.html

And you can still have them split; you just need an initrd. You can even
use something tiny, like: https://github.com/chris-se/tiny-initramfs

> It start getting broken when systemd start taking over the world.

Correlation is not causation. It has been broken multiple times over the
past two decades. Debian has just stopped supporting it after the switch
to systemd.

> Well, why should it have too many changes? It works great. And it is
> that well-hung that there is simply not to much to change.

If that's the case, you'd think that someone who actually wanted SysV to
be supported going forward would step up and maintain it. But no one
has. So either it's not such a small amount of work, no one who can do
the work is interested in maintaining SysV any longer, or no one knows
that they should be doing the work.

This is Debian. If you want SysV maintained, you should do the work.

-- 
Don Armstrong  https://www.donarmstrong.com

2: There is no out. There is only in.
  -- "The Prisoner (2009 Miniseries)"

___
Pkg-systemd-maintainers mailing list
Pkg-systemd-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-systemd-maintainers


Bug#771561: Bug:#771561: systemd: please remove /etc/fstab from bug report

2014-11-30 Thread Don Armstrong
I have deleted the contents of /etc/fstab from this bug report. From the
bug log it seems that the bug script actually does ask before attaching
it. It would probably be better to ask specifically for each of the
files that is attached after showing it, but I'm not going to mandate
that.

On Sun, 30 Nov 2014, Niels Thykier wrote:
 Nils (CC'ed) have requested the removal of an attached file from bug
 report, see below (#771561, BCC'ed to avoid duplicate requests to you).
 
 The file is attached to #771561, comment #5.

OK. I'll go ahead and replace this file with a dummy fstab file, but
anything in there should be considered exposed to the world.

-- 
Don Armstrong  http://www.donarmstrong.com

Once, our bodies were bells:
Simply moving in the wind
We tolled our names.
 -- Phillis Levin Poetry in Motion p55

___
Pkg-systemd-maintainers mailing list
Pkg-systemd-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-systemd-maintainers


Bug#769747: [PATCH] debian/control: switch order of systemd-sysv|systemd-shim dependencies for libpam-systemd. (Closes: #769747)

2014-11-16 Thread Don Armstrong
Control: tag -1 patch

---
 debian/changelog | 4 
 debian/control   | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/debian/changelog b/debian/changelog
index cf3c3af..6fc4716 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -27,6 +27,10 @@ systemd (215-6) UNRELEASED; urgency=medium
   * debian/ifup@.service: add a ConditionPath on /run/network, to avoid
 failing the unit if /etc/init.d/networking is disabled. (Closes: #769528)
 
+  [ Don Armstrong ]
+  * debian/control: switch order of systemd-sysv|systemd-shim dependencies
+for libpam-systemd. (Closes: #769747)
+
  -- Martin Pitt mp...@debian.org  Sun, 12 Oct 2014 17:29:00 +0200
 
 systemd (215-5) unstable; urgency=medium
diff --git a/debian/control b/debian/control
index 75986c1..cbd2d6a 100644
--- a/debian/control
+++ b/debian/control
@@ -112,7 +112,7 @@ Depends: ${shlibs:Depends},
  systemd (= ${binary:Version}),
  libpam-runtime (= 1.0.1-6),
  dbus,
- systemd-sysv | systemd-shim (= 8-2)
+ systemd-shim (= 8-2) | systemd-sysv
 Description: system and service manager - PAM module
  systemd is a replacement for sysvinit.  It is dependency-based and
  able to read the LSB init script headers in addition to parsing rcN.d
-- 
2.1.0

-- 
Don Armstrong  http://www.donarmstrong.com

The attackers hadn't simply robbed the bank. They had carried off
everything portable, including the security cameras, the carpets, the
chairs, and the light and plumbing fixtures. The conspirators had
deliberately punished the bank, for reasons best known to themselves,
or to their unknown controllers. They had superglued doors and
shattered windows, severed power and communications cables, poured
stinking toxins into the wallspaces, and concreted all of the sinks
and drains. In eight minutes, sixty people had ruined the building so
thoroughly that it had to be condemned and later demolished.
 -- Bruce Sterling, _Distraction_ p4

___
Pkg-systemd-maintainers mailing list
Pkg-systemd-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-systemd-maintainers