#1057 Removes pam_console module
Closed 5 months ago by pbokoc. Opened 6 months ago by quiet.
fedora-docs/ quiet/release-notes iss965  into  f39

@@ -21,4 +21,18 @@ 

  

  Due to the new `rubygem-net-ssh`, the updates for the packages above are built and delivered as one unit.

  

- A full list of changes in Vagrant 2.3.4 is available in the link:https://github.com/hashicorp/vagrant/blob/986a01734f008d62897bb66085381090e4fcabfc/CHANGELOG.md[upstream release notes]. 

\ No newline at end of file

+ A full list of changes in Vagrant 2.3.4 is available in the link:https://github.com/hashicorp/vagrant/blob/986a01734f008d62897bb66085381090e4fcabfc/CHANGELOG.md[upstream release notes].

+ 

+ 

+ [[remove-pam-console]]

+ == The `pam_console` module has been removed

+ 

+ The `pam_console` module is a Pluggable Authentication Module (PAM) for managing console-based access control. It gives users at the physical console additional capabilities when authenticating, and removes those capabilities when the user logs out.

+ 

+ On the other hand, `pam_console` has some limitations and flaws:

+ 

+ * Only one user can have additional capabilities at the same time (no multi-seat).

+ * Potential security problems of device file ownership if the PAM conversation ending is not executed.

+ * Currently, the module is non-functional because one of the configuration files used for defining the permissions (`50-default.perms`) is not installed in Fedora Workstation.

+ 

+ Due to the shortcomings mentioned above, `pam_console` has been removed in this release, and the `systemd-logind` service will be managing and controlling console logins and user sessions instead. 

\ No newline at end of file

Hi @ipedrosa,

could you please review this release note?

Thanks,

LGTM! Thank you for taking care of it.

Thanks! Merged locally due to a conflict.

Pull-Request has been closed by pbokoc

5 months ago
Metadata