From 5179cbc751bc2ba85780a896a6f172dc4f634f7b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?= Date: Thu, 6 Jul 2017 20:15:02 +0200 Subject: [PATCH] qrexec: ship pam configuration for debian Debian have different base pam config files to include than Fedora. Fixes QubesOS/qubes-issues#2903 --- qrexec/Makefile | 4 ++++ qrexec/qrexec.pam.debian | 11 +++++++++++ 2 files changed, 15 insertions(+) create mode 100644 qrexec/qrexec.pam.debian diff --git a/qrexec/Makefile b/qrexec/Makefile index 40ddc3a..0732c46 100644 --- a/qrexec/Makefile +++ b/qrexec/Makefile @@ -19,5 +19,9 @@ install: ln -s ../../bin/qrexec-client-vm $(DESTDIR)/usr/lib/qubes/qrexec_client_vm install qrexec-fork-server $(DESTDIR)/usr/bin install qubes-rpc-multiplexer $(DESTDIR)/usr/lib/qubes +ifeq ($(shell lsb_release -is), Debian) + install -D -m 0644 qrexec.pam.debian $(DESTDIR)/etc/pam.d/qrexec +else install -D -m 0644 qrexec.pam $(DESTDIR)/etc/pam.d/qrexec +endif diff --git a/qrexec/qrexec.pam.debian b/qrexec/qrexec.pam.debian new file mode 100644 index 0000000..7ca3b20 --- /dev/null +++ b/qrexec/qrexec.pam.debian @@ -0,0 +1,11 @@ +#%PAM-1.0 +# +# based on /etc/pam.d/su +auth sufficient pam_rootok.so +session required pam_env.so readenv=1 +session required pam_env.so readenv=1 envfile=/etc/default/locale +session required pam_limits.so + +@include common-auth +@include common-account +@include common-session