[devel] I: getting rid of pam_console.so

[devel] I: getting rid of pam_console.so

[Dmitry V. Levin]

[-- Attachment #1: Type: text/plain, Size: 693 bytes --]

Hi,

I want to get rid of pam_console.so as soon as possible.
In the era of consolekit this old stuff became pretty useless.
I've just built login package without dependency on pam_console.so,
and I hope on your cooperation in replacing pam_console.so with
something more useful and supported.

Here is a list of remaining pam_console.so clients:
SysVinit-usermode-1.5-alt2
autologin-1.0.0-alt4
gdm-2.28.1-alt3
gdm2.20-2.20.8-alt3
gprs-easyconnect-2.5.3-alt1.2
kbdrate-usermode-1.15.1-alt1
kde4base-workspace-common-4.3.4-alt1
kdebase-common-3.5.10-alt14
kdenetwork-kppp-3.5.10-alt4
sjog-cvs20040812-alt4
wdm-1.28-alt9
xdm-1.1.9-alt1
xorg-server-1.6.5-alt2


-- 
ldv

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]

Re: [devel] I: getting rid of pam_console.so

[Vladislav Zavjalov]

On 12/16/09 16:50, Dmitry V. Levin wrote:
> I want to get rid of pam_console.so as soon as possible.
> In the era of consolekit this old stuff became pretty useless.
> I've just built login package without dependency on pam_console.so,
> and I hope on your cooperation in replacing pam_console.so with
> something more useful and supported.

Кажется, что и в DM policy хочется иметь такое:

-session  optional	pam_console.so
-session  optional	pam_ck_connector.so

А баг про RHOST=localhost в pam_ck_connector может стоит повесить?

Слава

Re: [devel] I: getting rid of pam_console.so

[Dmitry V. Levin]

[-- Attachment #1: Type: text/plain, Size: 663 bytes --]

On Wed, Dec 16, 2009 at 05:18:26PM +0300, Vladislav Zavjalov wrote:
> On 12/16/09 16:50, Dmitry V. Levin wrote:
> >I want to get rid of pam_console.so as soon as possible.
> >In the era of consolekit this old stuff became pretty useless.
> >I've just built login package without dependency on pam_console.so,
> >and I hope on your cooperation in replacing pam_console.so with
> >something more useful and supported.
> 
> Кажется, что и в DM policy хочется иметь такое:
> 
> -session  optional	pam_console.so
> -session  optional	pam_ck_connector.so

+1

> А баг про RHOST=localhost в pam_ck_connector может стоит 
> повесить?

+1


-- 
ldv

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]

Re: [devel] I: getting rid of pam_console.so

[Dmitry V. Levin]

[-- Attachment #1: Type: text/plain, Size: 558 bytes --]

On Wed, Dec 16, 2009 at 04:50:37PM +0300, Dmitry V. Levin wrote:
> 
> I want to get rid of pam_console.so as soon as possible.
> In the era of consolekit this old stuff became pretty useless.
> I've just built login package without dependency on pam_console.so,
> and I hope on your cooperation in replacing pam_console.so with
> something more useful and supported.

JFYI, I'm about to import the following upstream's change:
http://cvs.fedoraproject.org/viewvc/rpms/pam/F-12/pam-1.1.0-console-nochmod.patch?revision=1.1&view=markup


-- 
ldv

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]

Re: [devel] I: getting rid of pam_console.so

[Alexey Gladkov]

On 16.12.2009 16:50, Dmitry V. Levin wrote:
> Hi,
> 
> I want to get rid of pam_console.so as soon as possible.
> In the era of consolekit this old stuff became pretty useless.
> I've just built login package without dependency on pam_console.so,
> and I hope on your cooperation in replacing pam_console.so with
> something more useful and supported.
> 
> Here is a list of remaining pam_console.so clients:

mount-2.16.1-alt3 also uses this module.

-- 
Rgrds, legion

Re: [devel] I: getting rid of pam_console.so

[Vladislav Zavjalov]

>> А баг про RHOST=localhost в pam_ck_connector может стоит
>> повесить?
>
> +1

#22557 Но Валера быстрый, а я невнимательный. Все уже было исправлено 
давно :)

Re: [devel] I: getting rid of pam_console.so

[Dmitry V. Levin]

[-- Attachment #1: Type: text/plain, Size: 667 bytes --]

On Wed, Dec 16, 2009 at 05:51:45PM +0300, Alexey Gladkov wrote:
> On 16.12.2009 16:50, Dmitry V. Levin wrote:
> > 
> > I want to get rid of pam_console.so as soon as possible.
> > In the era of consolekit this old stuff became pretty useless.
> > I've just built login package without dependency on pam_console.so,
> > and I hope on your cooperation in replacing pam_console.so with
> > something more useful and supported.
> > 
> > Here is a list of remaining pam_console.so clients:
> 
> mount-2.16.1-alt3 also uses this module.

In which way?
$ rpmquery -pR Sisyphus/files/x86_64/RPMS/mount-2.16.1-alt3.x86_64.rpm |fgrep -c console
0


-- 
ldv

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]

Re: [devel] I: getting rid of pam_console.so

[Alexey Gladkov]

On 16.12.2009 19:01, Dmitry V. Levin wrote:
>> mount-2.16.1-alt3 also uses this module.
> 
> In which way?

I mean this patch:

http://git.altlinux.org/people/legion/packages/util-linux-ng.git?p=util-linux-ng.git;a=blob;f=rpm/patches-fedora/util-linux-ng-2.13-mount-pamconsole.patch;h=dc512b0506a700db61ccee98e9bab8285a9ac113;hb=882660956a4982fa7183696324471e234fe688ad

-- 
Rgrds, legion

Re: [devel] I: getting rid of pam_console.so

[Sergey V Turchin]

[-- Attachment #1: Type: Text/Plain, Size: 356 bytes --]

On Wednesday 16 December 2009, Vladislav Zavjalov wrote:

[...]
> Кажется, что и в DM policy хочется иметь такое:
> -session  optional	pam_console.so
> -session  optional	pam_ck_connector.so
Т.е. просто убрать?

На p5 это можно делать?

-- 
Regards, Sergey, ALT Linux, http://www.altlinux.ru/
http://stinkfoot.org:11371/pks/lookup?op=get&search=0x1C2A3F08

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [devel] I: getting rid of pam_console.so

[Dmitry V. Levin]

[-- Attachment #1: Type: text/plain, Size: 588 bytes --]

On Wed, Dec 16, 2009 at 07:22:40PM +0300, Alexey Gladkov wrote:
> On 16.12.2009 19:01, Dmitry V. Levin wrote:
> >> mount-2.16.1-alt3 also uses this module.
> > 
> > In which way?
> 
> I mean this patch:
> 
> http://git.altlinux.org/people/legion/packages/util-linux-ng.git?p=util-linux-ng.git;a=blob;f=rpm/patches-fedora/util-linux-ng-2.13-mount-pamconsole.patch;h=dc512b0506a700db61ccee98e9bab8285a9ac113;hb=882660956a4982fa7183696324471e234fe688ad

Well, it implements some kind of _support_ for pam_console.
Fortunately, it adds no dependency on pam_console.


-- 
ldv

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]

Re: [devel] I: getting rid of pam_console.so

[Alexey I. Froloff]

[-- Attachment #1: Type: text/plain, Size: 296 bytes --]

On Wed, Dec 16, 2009 at 05:24:51PM +0300, Dmitry V. Levin wrote:
> > -session  optional	pam_console.so
> > -session  optional	pam_ck_connector.so
> +1
I hope updated Display Manager Policy will be available soon.

-- 
Regards,    --
Sir Raorn.   --- http://thousandsofhate.blogspot.com/

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [devel] I: getting rid of pam_console.so

[Vladislav Zavjalov]

>> Кажется, что и в DM policy хочется иметь такое:
>> -session  optional	pam_console.so
>> -session  optional	pam_ck_connector.so
> Т.е. просто убрать?

Нет, добавить такие строчки.
"-", как я понимаю, чтоб убрать зависимость от модуля - нет его, и 
ладно. Для людей, у которых не стоит ConsoleKit и pam_console.

Слава

Re: [devel] I: getting rid of pam_console.so

[Vladislav Zavjalov]

On 12/16/09 19:31, Sergey V Turchin wrote:
> On Wednesday 16 December 2009, Vladislav Zavjalov wrote:
>
> [...]
>> Кажется, что и в DM policy хочется иметь такое:
>> -session  optional	pam_console.so
>> -session  optional	pam_ck_connector.so
> Т.е. просто убрать?

Еще, насколько я знаю, сейчас почти все DMы регистрируют сессии где-то
внутри себя, без помощи pam_ck_connector. Так что простое добавление
pam_ck_connector.so, без выкидывания этой внутренней регистрации
сессии, скорее сломает работающее, чем починит сломанное...

А вот "-" перед pam_console.so нужен в связи с тем что Дима написал.

Re: [devel] I: getting rid of pam_console.so

[Alexey Gladkov]

On 16.12.2009 19:36, Dmitry V. Levin wrote:
> Well, it implements some kind of _support_ for pam_console.
> Fortunately, it adds no dependency on pam_console.

Yep. I know at least one more program that works similar way.

What will happen to programs that use /var/run/console/* ?

-- 
Rgrds, legion

Re: [devel] I: getting rid of pam_console.so

[Sergey V Turchin]

[-- Attachment #1: Type: Text/Plain, Size: 407 bytes --]

On Wednesday 16 December 2009, Vladislav Zavjalov wrote:

[...]
>  добавление pam_ck_connector.so, без выкидывания этой внутренней
>  регистрации сессии, скорее сломает работающее, чем починит
>  сломанное...
> 
> А вот "-" перед pam_console.so нужен в связи с тем что Дима
Ок, спасибо!

-- 
Regards, Sergey, ALT Linux, http://www.altlinux.ru/
http://stinkfoot.org:11371/pks/lookup?op=get&search=0x1C2A3F08

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [devel] I: getting rid of pam_console.so

[Dmitry V. Levin]

[-- Attachment #1: Type: text/plain, Size: 564 bytes --]

On Wed, Dec 16, 2009 at 07:57:12PM +0300, Alexey Gladkov wrote:
> On 16.12.2009 19:36, Dmitry V. Levin wrote:
> > Well, it implements some kind of _support_ for pam_console.
> > Fortunately, it adds no dependency on pam_console.
> 
> Yep. I know at least one more program that works similar way.
> 
> What will happen to programs that use /var/run/console/* ?

As long as pam_console.so is remaining in pam stack, it will go on
maintaining this directory.  Afterwards, something (consolekit?) might
support it as well, it's quite simple.


-- 
ldv

[-- Attachment #2: Type: application/pgp-signature, Size: 198 bytes --]