Am 20.08.19 um 18:35 schrieb Laurent Bigonville:
> Package: dovecot-core
> Version: 1:2.3.4.1-5
> Severity: normal
> 
> Hi,
> 
> Currently, the dovecot PAM service includes common-session. Shouldn't it
> be common-session-noninteractive instead?
> 
> On my machine, the only difference is the fact that the
> common-session-noninteractive is not including the pam_systemd module.
> 
> Including the pam_systemd module means that a new logind session will be
> started and some process could be also started by the systemd --user
> instance, which might be overkill.
> 

Fwiw, we were asked to add pam_systemd to common-session-noninteractive
as well.
https://security-tracker.debian.org/tracker/CVE-2019-9619

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to