Package: libpam-runtime Version: 1.3.1-5 Severity: normal Hi,
When using config snippets in /usr/share/pam-configs/, it seems that 'Session-Interactive-Only: no' is equivalent to 'Session-Interactive-Only: yes'. pam-auth-update only look at the presence of the Session-Interactive-Only field, not at its value: @@ -668,5 +678,10 @@ sub parse_pam_profile } } close(PROFILE); + if (!defined($profile{'Session-Interactive-Only'})) { + $profile{'Session-noninteractive-Type'} = $profile{'Session-Type'}; + $profile{'Session-noninteractive'} = $profile{'Session'}; + $profile{'Session-noninteractive-Initial'} = $profile{'Session-Initial'}; + } return %profile; } - Lucas