Bug#804565: /etc/pam.d/systemd-user: Please re-add the SELinux bits in the systemd-user pam service

[Laurent Bigonville]

Package: systemd
Version: 227-2
Severity: normal
File: /etc/pam.d/systemd-user
Tags: patch
User: selinux-devel at lists.alioth.debian.org
Usertags: selinux

Hi,

Could you please readd the calls to pam_selinux in the systemd-user pam
service?

I would use something like:

@include common-account
session  required pam_selinux.so close
session  required pam_selinux.so nottys open
@include common-session-noninteractive
session optional pam_systemd.so

Cheers,

Laurent Bigonville

-- Package-specific info:

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_BE.utf8, LC_CTYPE=fr_BE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages systemd depends on:
ii  adduser         3.113+nmu3
ii  libacl1         2.2.52-2
ii  libapparmor1    2.10-2+b1
ii  libaudit1       1:2.4.4-4
ii  libblkid1       2.27.1-1
ii  libc6           2.19-22
ii  libcap2         1:2.24-12
ii  libcap2-bin     1:2.24-12
ii  libcryptsetup4  2:1.6.6-5
ii  libgcrypt20     1.6.4-3
ii  libkmod2        21-1
ii  liblzma5        5.1.1alpha+20120614-2.1
ii  libmount1       2.27.1-1
ii  libpam0g        1.1.8-3.1
ii  libseccomp2     2.2.3-2
ii  libselinux1     2.4-2+b1
ii  libsystemd0     227-2
ii  mount           2.27.1-1
ii  sysv-rc         2.88dsf-59.2
ii  udev            227-2
ii  util-linux      2.27.1-1

Versions of packages systemd recommends:
ii  dbus            1.10.2-1
ii  libpam-systemd  227-2

Versions of packages systemd suggests:
ii  systemd-container  227-2
ii  systemd-ui         3-4

-- Configuration Files:
/etc/pam.d/systemd-user changed [not included]

-- no debconf information