[Bug 549172] Re: pam config: not yet including common-session modules

[ceg]

** Changed in: sudo (Ubuntu)
       Status: Confirmed => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/549172

Title:
  pam config: not yet including common-session modules

Status in “sudo” package in Ubuntu:
  Fix Committed
Status in “sudo” package in Debian:
  Fix Released

Bug description:
  A simple package configuration issue.

  PAM modules like pam_umask, limits and pam_env don't work with sudo
  because no common-session modules are included in sudo's pam config
  file.

  /etc/pam.d/sudo should be shipped containing

  @include common-session-noninteracative

  If  "sudo -i" would really need it, sudo may use and ship two separate
  configs /etc/pam/sudo-noninteractive and /etc/pam.d/sudo-interactive,
  and @include common-session in the latter. But I think sudo -i shouldl
  be fine with using the noninteractive auth process config most of the
  time.

  Sudo seems to support pam sessions modules since version 1.7
  http://www.sudo.ws/pipermail/sudo-users/2005-May/002520.html
  but they don't get loaded yet.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/549172/+subscriptions