Bug Report: libpam-cgfs - Admin Privileges lost in UI

Peter Rodgers pjr at 1060research.com
Thu Mar 17 08:17:10 UTC 2016


Package: libpam_cgfs
Version: 2.0.0~rc5-0ubuntu1~ubuntu14.04.1~ppa1
Host Version: Ubuntu 14.04 fully patched
Source of the package: http://ppa.launchpad.net/ubuntu-lxc/lxd-stable/ubuntu

Hey guys  - quick report on a pretty bad regression in libpam_cgfs.

Effect:  Total loss of admin privileges in Unity desktop even though
user is in group sudo.
Symptom:  Options to modify settings in nm-applet are greyed out so
cannot control networking.   Options to change user in users settings
greyed out etc.
Error Logs:  gnome-session reports cannot get session.  Is pam_systemd
being used?

It appears that the pam_systemd plugin is not present due to pam_cgfs.so
being in the pam session plugin configuration in  /etc/pam.d/common-session.

If I comment this line

session        optional        pam_cgfs.so -c freezer,memory,name=systemd

Everything works again.

Conclusion something is broken in pam_cgfs.so and that's causing side
effects with other pam plugins and this ripples through all the way to
the desktop.

Cheers,

Peter









More information about the Ubuntu-devel-discuss mailing list