I stumbled across this while looking into how to setup pam so
pam_limits.so would be applied in various scenarios, at least sudo, su,
ssh login, shell login. This does not seem to be as trivial as just
adding it to common-session. Using common-session-noninteractive strikes
me as odd, e.g. sudo bash is quite interactive.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/1268373
Title:
pam_limits.so removed from /etc/pam.d/sudo in Precise
Status in sudo package in Ubuntu:
Confirmed
Bug description:
Hello,
In the /etc/pam.d/sudo file installed by this package, pam_limits.so
is no longer included in Precise.
It was present in /etc/pam.d/sudo in Lucid:
root@vm:~# grep pam_limits.so ./etc/pam.d/sudo
session required pam_limits.so
In Precise, the file looks like:
root@vm:~# cat ./etc/pam.d/sudo
#%PAM-1.0
@include common-auth
@include common-account
@include common-session-noninteractive
root@vm:~#
The changelog for the sudo package mentions the addition of common-
session-noninteractive, but doesn't mention why pam_limits.so was
removed; pam_limits.so is not included in common-session-
noninteractive either:
--- sudo-1.7.4p6/debian/sudo.manpages 2011-05-23 07:01:02.0 +
+++ sudo-1.8.3p1/debian/sudo.manpages 2011-10-26 23:04:10.0 +
@@ -1,3 +1,3 @@
-build-simple/sudo.man
-build-simple/sudoers.man
-build-simple/visudo.man
+build-simple/doc/sudo.man
+build-simple/doc/sudoers.man
+build-simple/doc/visudo.man
diff -Nru sudo-1.7.4p6/debian/sudo.pam sudo-1.8.3p1/debian/sudo.pam
--- sudo-1.7.4p6/debian/sudo.pam 2011-05-23 07:01:02.0 +
+++ sudo-1.8.3p1/debian/sudo.pam 2011-10-26 23:04:10.0 +
@@ -2,6 +2,4 @@
@include common-auth
@include common-account
-
-session required pam_permit.so
-session required pam_limits.so
+@include common-session-noninteractive
Best regards,
Matt
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1268373/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp