[Pkg-utopia-maintainers] Bug#677269: libpam-ck-connector: pam_ck_connector pam module shouldn't be added in common-session

[Laurent Bigonville]

Package: libpam-ck-connector
Version: 0.4.5-3
Severity: important

Hi,

the pam_ck_connector manpage states that this module should only be used
for local login:

 The pam_ck_connector PAM module registers a login session with the
 system-wide ConsoleKit daemon. This PAM module should be used with
 caution; only local login managers such as login(1) should use
 this. Since the ConsoleKit daemon can accept both an tty and an
 X11 display the normal parameters set by PAM are not always
 useful.

Including this module in common-session defeat this as it will also be
added in the sshd pam service file.

On default Fedora install, this module is only added into the login and
gdm service.

 -session optional pam_ck_connector.so

I'm not sure if the '-' before the type is actually supported in Debian.

Cheers

Laurent Bigonville

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_BE.utf8, LC_CTYPE=fr_BE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libpam-ck-connector depends on:
ii  libc6             2.13-33
ii  libck-connector0  0.4.5-3
ii  libdbus-1-3       1.6.0-1
ii  libpam-runtime    1.1.3-7.1
ii  libpam0g          1.1.3-7.1

libpam-ck-connector recommends no packages.

libpam-ck-connector suggests no packages.

-- no debconf information