[Pkg-shadow-devel] Bug#705301: login: Please enable pam_limits for su

[Edward Allcutt]

Package: login
Version: 1:4.1.5.1-1
Severity: normal

Dear Maintainer,

/etc/pam.d/su contains a line for pam_limits.so but it is commented out
by default. This is in contrast to all the other "new session" type
services (atd cron login sshd *dm) which have it enabled by default.

It would be nice to have more consistency to reduce the amount of local
configuration needed. I'm somewhat surprised pam_limits.so isn't in
the common-session* files rather than individually in those for the
login-type programs. Is there some reason a PAM session created by
su (particularly su -l) should differ from those created by cron or login?

-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (900, 'testing'), (800, 'unstable'), (700, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages login depends on:
ii  libc6           2.13-38
ii  libpam-modules  1.1.3-7.1
ii  libpam-runtime  1.1.3-7.1
ii  libpam0g        1.1.3-7.1

login recommends no packages.

login suggests no packages.

-- no debconf information