FS#32015 - [openssh] loginuid before systemd in sshd.pam

Attached to Project: Arch Linux
Opened by Daniel Wallace (gtmanfred) - Tuesday, 16 October 2012, 18:34 GMT
Last edited by Gaetan Bisson (vesath) - Wednesday, 17 October 2012, 02:31 GMT
Task Type General Gripe
Category Packages: Core
Status Closed
Assigned To Gaetan Bisson (vesath)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Please move the line
session optional pam_loginuid.so

to be above
session required pam_systemd.so

in the sshd.pam file so that the loginctl session
will be correctly kernel audit id



14:06:03 poettering | gtmanfred: ah, yeah, pam_loginuid.so is the other part of audit
14:06:14 poettering | gtmanfred: you need audit in the kernel + pam_loginuid.so before pam_systemd
14:06:25 poettering | gtmanfred: only then systemd can key off kernel audit ids
14:06:48 poettering | gtmanfred: pam_loginuid.so initializes the kernel audit ids, that's why we need to run after them
This task depends upon

Closed by  Gaetan Bisson (vesath)
Wednesday, 17 October 2012, 02:31 GMT
Reason for closing:  Works for me
Comment by Gaetan Bisson (vesath) - Wednesday, 17 October 2012, 02:07 GMT
That is already the case...
Comment by Daniel Wallace (gtmanfred) - Wednesday, 17 October 2012, 02:20 GMT
see you say that now, and i look again... and it turns out it was, I even went to svn to check and some how missed it.

My bad.

Loading...