Hey. Anything new about this?
It's clear that .profile and friends is *not* the right place to set the path. I would say however, that .xsessionrc isn't either, simply be because this would again be just for X, so users would need to set their PATH/etc. again at different locations. Doing this in PAM seems a proper way and adding user_readenv=1 seems to be not very invasive. I've also filed: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989919 which asks the maintainers for login doing the same. Cheers, Chris.