core-agent-linux

Qubes/core-agent-linux

Fork 0

Commit Graph

Author	SHA1	Message	Date
Marek Marczykowski-Górecki	3af55c5cb3	qrexec: use PAM directly instead of calling su to setup the session Instead of calling 'su' to switch the user, use own implementation of this. Thanks to PAM it's pretty simple. The main reason is to have control over process waiting for session termination (to call pam_close_sesion/pam_end). Especially we don't want it to keep std* fds open, which would prevent qrexec-agent from receiving EOF when one of them will be closed. Also, this will preserve QREXEC_AGENT_PID environment variable. Fixes QubesOS/qubes-issues#2851	2017-07-05 02:17:43 +02:00
Marek Marczykowski-Górecki	ff26dcfe53	Add qrexec-client-vm man page This clarifies and also defines some corner cases like exit code reporting. QubesOS/qubes-issues#2861	2017-06-21 11:21:40 +02:00
Marek Marczykowski-Górecki	000a93e001	rpm,deb: split qrexec-agent into separate subpackage While it doesn't make sense to install qubes-core-agent without qrexec, it may make sense to do the otherway around - install just qrexec-agent without all the qrexec services and configuration. For example on some pre-installed system. QubesOS/qubes-issues#2771	2017-06-08 22:11:37 +02:00

Author

SHA1

Message

Date

Marek Marczykowski-Górecki

3af55c5cb3

qrexec: use PAM directly instead of calling su to setup the session

Instead of calling 'su' to switch the user, use own implementation of
this. Thanks to PAM it's pretty simple. The main reason is to have
control over process waiting for session termination (to call
pam_close_sesion/pam_end). Especially we don't want it to keep std* fds
open, which would prevent qrexec-agent from receiving EOF when one of
them will be closed.
Also, this will preserve QREXEC_AGENT_PID environment variable.

Fixes QubesOS/qubes-issues#2851

2017-07-05 02:17:43 +02:00

Marek Marczykowski-Górecki

ff26dcfe53

Add qrexec-client-vm man page

This clarifies and also defines some corner cases like exit code
reporting.

QubesOS/qubes-issues#2861

2017-06-21 11:21:40 +02:00

Marek Marczykowski-Górecki

000a93e001

rpm,deb: split qrexec-agent into separate subpackage

While it doesn't make sense to install qubes-core-agent without qrexec,
it may make sense to do the otherway around - install just
qrexec-agent without all the qrexec services and configuration. For
example on some pre-installed system.

QubesOS/qubes-issues#2771

2017-06-08 22:11:37 +02:00

3 Commits