Package: libpam-openafs-session
Version: 1.0-6
Severity: normal

In pam_close_session(), one finds

if(setuid(UID) < 0) {

called in the current process. 

This breaks for example gdm, which can no longer control the X server during 
logout, and it subsequently complains about :0 being busy.

If k_unlog() must be called as the PAM user, one should fork() and call 
setuid() in the child process.

This old bug did not manifest itself earlier because of #399013.

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to