Package: libpam-runtime
Version: 0.79-4

For hal/dbus to know if the request for action is coming from a user
on the console (aka in front of the machine), a method to discover
this is required.  In Redhat the pam_console module is used for this,
but it has a few race conditions.  In Ubuntu the pam_foreground module
is used for this.  It do not have the race problems, and seem like a
better implementation of the same idea.

Getting hal/dbus to properly handle at_console access checks was
requried for Debian Edu, and we implemented this by installing the
libpam-foreground package and modifying /etc/pam.d/common-session to
make it an optional module.  The result should look like this:

  session optional        pam_foreground.so
  session required        pam_unix.so

The change from the current default is the extra pam_foreground.so
line.  Please make this the default configuration for pam.  If the
libpam-foreground is missing, the pam config will still work, and the
only negative effect will be that the at_console access check isn't
working.

Happy hacking,
-- 
Petter Reinholdtsen


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to