Package: libpam-modules
Version: 1.1.3-9
Severity: normal

Hi,

I have recently set CONFIG_AUDIT_LOGINUID_IMMUTABLE in my kernels,
which was a mistake in the first place. The docs for
CONFIG_AUDIT_LOGINUID_IMMUTABLE say that this may be useful for
non-sysvinit init systems while I am still on sysvinit.

This resulted in breaking ssh login in the case that the ssh daemon
was restartet after system boot. The ssh daemon started at boot time
is not affected and works fine.

Reason for breakage is that ssh/libpam tries to write to
/proc/self/loginuid, gets back EPERM and dies a horrible death with a
less-than-helpful error message along the lines of "error: PAM:
pam_open_session(): Cannot make/remove an entry for the specified
session". On the client, it looks like the session was broken down in
an orderly matter ("Last login: Wed Jun  5 12:46:31 2013 from ..",
"Connection to hostname.example closed").

Please consider giving a more helpful error message in this case. It
was once more necessary to strace to find out what was going on on my
system.

Greetings
Marc

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.9.4-zgws1 (SMP w/8 CPU cores; PREEMPT)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libpam-modules depends on:
ii  debconf [debconf-2.0]  1.5.50
ii  libc6                  2.17-4
ii  libdb5.1               5.1.29-5
ii  libpam-modules-bin     1.1.3-9
ii  libpam0g               1.1.3-9
ii  libselinux1            2.1.13-2

libpam-modules recommends no packages.

libpam-modules suggests no packages.

-- debconf information:
  libpam-modules/disable-screensaver:


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to