From cc44b2b8ac087177895b91caf2e8b1543931ea9a2efe587c9fb7f763fac45848 Mon Sep 17 00:00:00 2001 From: Franck Bui Date: Wed, 6 Oct 2021 08:03:55 +0000 Subject: [PATCH] - Suppress PAM warning when the credentials for user@.service service are established (bsc#1190515) systemd-user PAM service needs to define a default implementation of pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used, which consists of pam_warn.so + pam_deny.so, and will throw a warning each time a user logs in. OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1197 --- systemd-mini.changes | 11 +++++++++++ systemd-user | 6 ++++-- systemd.changes | 11 +++++++++++ 3 files changed, 26 insertions(+), 2 deletions(-) diff --git a/systemd-mini.changes b/systemd-mini.changes index 9a345222..2f301ff0 100644 --- a/systemd-mini.changes +++ b/systemd-mini.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Wed Oct 6 07:40:24 UTC 2021 - Franck Bui + +- Suppress PAM warning when the credentials for user@.service service + are established (bsc#1190515) + + systemd-user PAM service needs to define a default implementation of + pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) + is used, which consists of pam_warn.so + pam_deny.so, and will throw + a warning each time a user logs in. + ------------------------------------------------------------------- Mon Oct 4 14:40:12 UTC 2021 - Franck Bui diff --git a/systemd-user b/systemd-user index f1d252b7..055168eb 100644 --- a/systemd-user +++ b/systemd-user @@ -2,8 +2,10 @@ # # Used by systemd --user instances. -account include common-account +auth required pam_permit.so + +account include common-account session required pam_selinux.so close session required pam_selinux.so nottys open -session include common-session +session include common-session diff --git a/systemd.changes b/systemd.changes index 9a345222..2f301ff0 100644 --- a/systemd.changes +++ b/systemd.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Wed Oct 6 07:40:24 UTC 2021 - Franck Bui + +- Suppress PAM warning when the credentials for user@.service service + are established (bsc#1190515) + + systemd-user PAM service needs to define a default implementation of + pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) + is used, which consists of pam_warn.so + pam_deny.so, and will throw + a warning each time a user logs in. + ------------------------------------------------------------------- Mon Oct 4 14:40:12 UTC 2021 - Franck Bui