pam session

From: Christian Kraemer (ckraemerat_private)
Date: Mon Jun 18 2001 - 18:11:02 PDT

  • Next message: Keith Stevenson: "IBM ERS: Vulnerability in AIX diagrpt"

    Hi,
    
    Does anybody know why openssh (openssh-2.9p1) on a linux system does not call
    pam_open_session if no pty is used? In this way the session modules (in
    /etc/pam.d) are not activated.
    
    This is espacially anoying if you
    use pam_limits.so to set rlimits. Every user could
    cirrcumvent them easily by calling ssh in this way:
    ssh user@server /bin/sh
    
    I do not know if this issue has been disscused before and if this behavior is
    not alright .....
    
    cu Christian 
    



    This archive was generated by hypermail 2b30 : Fri Jun 22 2001 - 15:48:11 PDT