Package: libpam-modules Version: 1.1.3-9 Severity: normal Hi,
I have recently set CONFIG_AUDIT_LOGINUID_IMMUTABLE in my kernels, which was a mistake in the first place. The docs for CONFIG_AUDIT_LOGINUID_IMMUTABLE say that this may be useful for non-sysvinit init systems while I am still on sysvinit. This resulted in breaking ssh login in the case that the ssh daemon was restartet after system boot. The ssh daemon started at boot time is not affected and works fine. Reason for breakage is that ssh/libpam tries to write to /proc/self/loginuid, gets back EPERM and dies a horrible death with a less-than-helpful error message along the lines of "error: PAM: pam_open_session(): Cannot make/remove an entry for the specified session". On the client, it looks like the session was broken down in an orderly matter ("Last login: Wed Jun 5 12:46:31 2013 from ..", "Connection to hostname.example closed"). Please consider giving a more helpful error message in this case. It was once more necessary to strace to find out what was going on on my system. Greetings Marc -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.9.4-zgws1 (SMP w/8 CPU cores; PREEMPT) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libpam-modules depends on: ii debconf [debconf-2.0] 1.5.50 ii libc6 2.17-4 ii libdb5.1 5.1.29-5 ii libpam-modules-bin 1.1.3-9 ii libpam0g 1.1.3-9 ii libselinux1 2.1.13-2 libpam-modules recommends no packages. libpam-modules suggests no packages. -- debconf information: libpam-modules/disable-screensaver: -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org