Package: libpam-runtime
Version: 1.3.1-5
Severity: normal

Hi,

When using config snippets in /usr/share/pam-configs/, it seems that
'Session-Interactive-Only: no' is equivalent to 'Session-Interactive-Only: yes'.

pam-auth-update only look at the presence of the
Session-Interactive-Only field, not at its value:

@@ -668,5 +678,10 @@ sub parse_pam_profile
                }
        }
        close(PROFILE);
+       if (!defined($profile{'Session-Interactive-Only'})) {
+                       $profile{'Session-noninteractive-Type'} = 
$profile{'Session-Type'};
+                       $profile{'Session-noninteractive'} = 
$profile{'Session'};
+                       $profile{'Session-noninteractive-Initial'} = 
$profile{'Session-Initial'};
+       }
        return %profile;
 }

- Lucas

Reply via email to