Package: libpam-systemd
Version: 232-25
Severity: minor

It seems reasonable that non-login users should not have per-user
sessions by default. Using pam_succeed_if to skip creation for users
with /bin/false or /usr/sbin/nologin shells seems reasonable.

IE, the following (currently untested):

Name: Register user sessions in the systemd control group hierarchy
Default: yes
Priority: 0
Session-Interactive-Only: yes
Session-Type: Additional
Session:
        [success=2 default=ignore] pam_succeed_if quiet shell = /bin/false
        [success=1 default=ignore] pam_succeed_if quiet shell = 
/usr/sbin/nologin
        optional        pam_systemd.so


Alternatively, documenting this workaround in README.Debian might be
good enough.

-- 
Don Armstrong                      https://www.donarmstrong.com

Love is... a complex sequence of neurochemical reactions that makes
people behave like idiots. It's similar to intoxication, but the
hangover's even worse.
 -- J. Jacques _Questionable Content_ #1039
    http://www.questionablecontent.net/view.php?comic=1039

_______________________________________________
Pkg-systemd-maintainers mailing list
Pkg-systemd-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-systemd-maintainers

Reply via email to