Accepting request 1074913 from Base:System

- login.pamd, remote.pamd: include postlogin-* rules
- runuser.pamd, su.pamd: Include common-session-nonlogin instead
  of common-session

OBS-URL: https://build.opensuse.org/request/show/1074913
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/util-linux?expand=0&rev=268

login.pamd

@@ -1,10 +1,14 @@
 #%PAM-1.0
 auth      requisite  pam_nologin.so
-auth      include    common-auth
-account   include    common-account
-password  include    common-password
+auth      substack   common-auth
+auth      include    postlogin-auth
+account   substack   common-account
+account   include    postlogin-account
+password  substack   common-password
+password  include    postlogin-password
 session   required   pam_loginuid.so
 session   optional   pam_keyinit.so force revoke
-session   include    common-session
+session   substack   common-session
+session   include    postlogin-session
 session   optional   pam_motd.so
 session   optional   pam_mail.so standard

remote.pamd

@@ -3,10 +3,14 @@
 # the -h option is used).
 auth      requisite  pam_nologin.so
 auth      [user_unknown=ignore success=ok ignore=ignore auth_err=die default=bad]  pam_securetty.so
-auth      include    common-auth
-account   include    common-account
-password  include    common-password
+auth      substack   common-auth
+auth      include    postlogin-auth
+account   substack   common-account
+account   include    postlogin-account
+password  substack   common-password
+password  include    postlogin-password
 session   required   pam_loginuid.so
 session   optional   pam_keyinit.so force revoke
-session   include    common-session
+session   substack   common-session
+session   include    postlogin-session
 session   optional   pam_mail.so standard

runuser.pamd

@@ -3,5 +3,5 @@
 # "auth sufficient pam_rootok.so" dummy line).
 auth     sufficient  pam_rootok.so
 session  optional    pam_keyinit.so revoke
-session  include     common-session
+session  include     common-session-nonlogin
 session  optional    pam_xauth.so

util-linux.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Mar 27 08:10:15 UTC 2023 - Thorsten Kukuk <kukuk@suse.com>
+
+- login.pamd, remote.pamd: include postlogin-* rules
+- runuser.pamd, su.pamd: Include common-session-nonlogin instead
+  of common-session
+
 -------------------------------------------------------------------
 Mon Mar 13 12:40:13 UTC 2023 - Daniel Garcia <daniel.garcia@suse.com>