[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    pam session
From:       Christian Kraemer <ckraemer () ginko ! de>
Date:       2001-06-19 1:11:02
[Download RAW message or body]

Hi,

Does anybody know why openssh (openssh-2.9p1) on a linux system does not call
pam_open_session if no pty is used? In this way the session modules (in
/etc/pam.d) are not activated.

This is espacially anoying if you
use pam_limits.so to set rlimits. Every user could
cirrcumvent them easily by calling ssh in this way:
ssh user@server /bin/sh

I do not know if this issue has been disscused before and if this behavior is
not alright .....

cu Christian 

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic