On 03/20/2017 04:51 AM, Nick Darren wrote: > Hello, > > Is it normal when deny the root access using 'VM-Sudo' method with the > leak message like below? > > $ su > /usr/lib/qubes/qrexec-client-vm failed: exit code 1 > su: System error > > $ sudo su > /usr/lib/qubes/qrexec-client-vm failed: exit code 1 > sudo: PAM authentication error: System error > > > Is there any other way on how to prevent this leak message from happened > (i.e. without any message appear on the tty instead)? > > > Thank you. > > > > > > Just figured it out myself by include `stdout` and `quiet` pam auth's optionslike below did solved this issue.
/auth [success=done default=die] pam_exec.so seteuid stdout quiet /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAuth /usr/bin/grep -q ^1$/ Case close. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2e6d084d-0bbd-fb5b-d0f2-2f2aa0b72ac7%40gmail.com. For more options, visit https://groups.google.com/d/optout.
signature.asc
Description: OpenPGP digital signature
