Bug#851243: libpam-systemd: pam_systemd does not catch supplementary groups from pam_group

2017-02-24 Thread Juha Erkkilä
Here is a workaround for this problem. It is possible to create a file /etc/systemd/system/user@.service.d/override.conf with the following contents: [Service] SupplementaryGroups=dialout Now, when used in conjunction with pam_group as specified in the bug report, all desktop processes' group

Bug#851243: libpam-systemd: pam_systemd does not catch supplementary groups from pam_group

2017-01-13 Thread Juha Erkkilä
Package: libpam-systemd Version: 232-8 Severity: normal Dear Maintainer, pam_group.so provides a mechanism to add users to supplementary groups via configurations from /etc/security/group.conf. This mechanism works only partially to user desktop processes when logging in through gdm. It may

Bug#851243: libpam-systemd: pam_systemd does not catch supplementary groups from pam_group

2017-01-15 Thread Juha Erkkilä
2017-01-13 18:10 GMT+02:00 Michael Biebl : > > gnome-terminal uses a systemd --user service which uses > /etc/pam.d/systemd-user > As you can see, this pam module does not include common-auth. > If you add pam_group to /etc/pam.d/systemd-user I suspect it would work. Thank you