Re: [PATCH][RESEND 2] Revert "AUDIT: Allow login in non-init namespaces"

2015-01-14 Thread Calvin Owens
On Friday 01/09 at 16:36 -0500, Paul Moore wrote: > On Friday, January 09, 2015 01:24:51 PM Calvin Owens wrote: > > On Friday 01/09 at 15:33 -0500, Paul Moore wrote: > > > While I haven't had reason to test this code lately, last I knew it was > > > working, what problems are you seeing Calvin? Al

Re: [PATCH][RESEND 2] Revert "AUDIT: Allow login in non-init namespaces"

2015-01-13 Thread Richard Guy Briggs
On 15/01/13, Richard Guy Briggs wrote: > On 15/01/08, Calvin Owens wrote: > > This reverts 543bc6a1a987 "AUDIT: Allow login in non-init namespaces". > > > > This commit incorrectly assumes that libpam treats -ECONNREFUSED as > > an indicator that audit is disabled, and -EPERM or any other error >

Re: [PATCH][RESEND 2] Revert "AUDIT: Allow login in non-init namespaces"

2015-01-13 Thread Richard Guy Briggs
On 15/01/08, Calvin Owens wrote: > This reverts 543bc6a1a987 "AUDIT: Allow login in non-init namespaces". > > This commit incorrectly assumes that libpam treats -ECONNREFUSED as > an indicator that audit is disabled, and -EPERM or any other error > as a fatal error that prevents the login from con

Re: [PATCH][RESEND 2] Revert "AUDIT: Allow login in non-init namespaces"

2015-01-09 Thread Paul Moore
On Friday, January 09, 2015 01:24:51 PM Calvin Owens wrote: > On Friday 01/09 at 15:33 -0500, Paul Moore wrote: > > While I haven't had reason to test this code lately, last I knew it was > > working, what problems are you seeing Calvin? Also, with what > > distribution? > > An SSH authentication

Re: [PATCH][RESEND 2] Revert "AUDIT: Allow login in non-init namespaces"

2015-01-09 Thread Calvin Owens
On Friday 01/09 at 15:33 -0500, Paul Moore wrote: > On Thursday, January 08, 2015 05:44:48 PM Calvin Owens wrote: > > This reverts 543bc6a1a987 "AUDIT: Allow login in non-init namespaces". > > > > This commit incorrectly assumes that libpam treats -ECONNREFUSED as > > an indicator that audit is di

Re: [PATCH][RESEND 2] Revert "AUDIT: Allow login in non-init namespaces"

2015-01-09 Thread Paul Moore
On Thursday, January 08, 2015 05:44:48 PM Calvin Owens wrote: > This reverts 543bc6a1a987 "AUDIT: Allow login in non-init namespaces". > > This commit incorrectly assumes that libpam treats -ECONNREFUSED as > an indicator that audit is disabled, and -EPERM or any other error > as a fatal error tha

[PATCH][RESEND 2] Revert "AUDIT: Allow login in non-init namespaces"

2015-01-08 Thread Calvin Owens
This reverts 543bc6a1a987 "AUDIT: Allow login in non-init namespaces". This commit incorrectly assumes that libpam treats -ECONNREFUSED as an indicator that audit is disabled, and -EPERM or any other error as a fatal error that prevents the login from continuing. The opposite is in fact true: -EP