From 98f4b5f0da195e0c58d0789aac41d934b952f8f6 Mon Sep 17 00:00:00 2001 From: Jaroslav Klech Date: Oct 20 2023 12:41:06 +0000 Subject: Removes pam_console module --- diff --git a/modules/release-notes/pages/sysadmin/System_Utilities.adoc b/modules/release-notes/pages/sysadmin/System_Utilities.adoc index c2c8bbb..54bd889 100644 --- a/modules/release-notes/pages/sysadmin/System_Utilities.adoc +++ b/modules/release-notes/pages/sysadmin/System_Utilities.adoc @@ -21,4 +21,18 @@ The following package dependencies for `vagrant` were also updated: Due to the new `rubygem-net-ssh`, the updates for the packages above are built and delivered as one unit. -A full list of changes in Vagrant 2.3.4 is available in the link:https://github.com/hashicorp/vagrant/blob/986a01734f008d62897bb66085381090e4fcabfc/CHANGELOG.md[upstream release notes]. \ No newline at end of file +A full list of changes in Vagrant 2.3.4 is available in the link:https://github.com/hashicorp/vagrant/blob/986a01734f008d62897bb66085381090e4fcabfc/CHANGELOG.md[upstream release notes]. + + +[[remove-pam-console]] +== The `pam_console` module has been removed + +The `pam_console` module is a Pluggable Authentication Module (PAM) for managing console-based access control. It gives users at the physical console additional capabilities when authenticating, and removes those capabilities when the user logs out. + +On the other hand, `pam_console` has some limitations and flaws: + +* Only one user can have additional capabilities at the same time (no multi-seat). +* Potential security problems of device file ownership if the PAM conversation ending is not executed. +* Currently, the module is non-functional because one of the configuration files used for defining the permissions (`50-default.perms`) is not installed in Fedora Workstation. + +Due to the shortcomings mentioned above, `pam_console` has been removed in this release, and the `systemd-logind` service will be managing and controlling console logins and user sessions instead. \ No newline at end of file