Re: [Bug 1672742] Re: pam session does not work in xrdp

2017-03-15 Thread Klaus Steinberger
Am 15.03.2017 um 08:02 schrieb Klaus Steinberger: > Am 15.03.2017 um 00:44 schrieb Seth Arnold: >> Hello Klaus, is this a usability issue or does this also allow someone >> to improperly elevate their privileges? > > One more point: Correct setting of umask (which is definitly a security >

Re: [Bug 1672742] Re: pam session does not work in xrdp

2017-03-15 Thread Klaus Steinberger
Am 15.03.2017 um 00:44 schrieb Seth Arnold: > Hello Klaus, is this a usability issue or does this also allow someone > to improperly elevate their privileges? One more point: Correct setting of umask (which is definitly a security thing) is also dependent on a working session management -> see

Re: [Bug 1672742] Re: pam session does not work in xrdp

2017-03-15 Thread Klaus Steinberger
Hi Seth, > Hello Klaus, is this a usability issue or does this also allow someone > to improperly elevate their privileges? it does allow someone to login to machines which she/he has no right to access. E.g. machines reserved for a group, or machines with special hardware which should not be