[Bug 1199026] New: pam_keyinit is being used by some unexpected applications
https://bugzilla.suse.com/show_bug.cgi?id=1199026 Bug ID: 1199026 Summary: pam_keyinit is being used by some unexpected applications Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs@suse.de Reporter: fbui@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Those users look suspicious: /usr/etc/pam.d/groupadd:session optional pam_keyinit.so revoke /usr/etc/pam.d/groupdel:session optional pam_keyinit.so revoke /usr/etc/pam.d/groupmod:session optional pam_keyinit.so revoke /usr/etc/pam.d/newusers:session optional pam_keyinit.so revoke since this PAM module is supposed to be used by login processes (such as login, sshd and so on). Please not that it's not an exhaustive list, the full list of pam_keyinit users should be verified. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1199026 https://bugzilla.suse.com/show_bug.cgi?id=1199026#c1 Josef M�llers <josef.moellers@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |josef.moellers@suse.com Assignee|screening-team-bugs@suse.de |amajer@suse.com --- Comment #1 from Josef M�llers <josef.moellers@suse.com> --- Hi Adam, Can you please check if these invocations of pam_keyinit.so should be there? -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1199026 https://bugzilla.suse.com/show_bug.cgi?id=1199026#c2 Adam Majer <amajer@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|amajer@suse.com |mvetter@suse.com --- Comment #2 from Adam Majer <amajer@suse.com> --- Forwarding to our shadow maintainer, Michael :-) But just for the reference, this is what we have in our pam configurations on SLES15 as well. Also, this was added in response to Bug #1144060 in 2019. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com