Bug#804565: /etc/pam.d/systemd-user: Please re-add the SELinux bits in the systemd-user pam service

[Michael Biebl]

Hi Laurent!

Am 09.11.2015 um 17:54 schrieb Laurent Bigonville:
> Package: systemd
> Version: 227-2
> Severity: normal
> File: /etc/pam.d/systemd-user
> Tags: patch
> User: selinux-devel at lists.alioth.debian.org
> Usertags: selinux
> 
> Hi,
> 
> Could you please readd the calls to pam_selinux in the systemd-user pam
> service?
> 
> I would use something like:
> 
> @include common-account
> session  required pam_selinux.so close
> session  required pam_selinux.so nottys open
> @include common-session-noninteractive
> session optional pam_systemd.so

Not being well versed in selinux, could you quickly explain, why that is
needed and what is broken without the entries otherwise?

Cheers,
Michael
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20151109/4714f178/attachment-0002.sig>