Go to file
Marek Marczykowski-Górecki 3af55c5cb3
qrexec: use PAM directly instead of calling su to setup the session
Instead of calling 'su' to switch the user, use own implementation of
this. Thanks to PAM it's pretty simple. The main reason is to have
control over process waiting for session termination (to call
pam_close_sesion/pam_end). Especially we don't want it to keep std* fds
open, which would prevent qrexec-agent from receiving EOF when one of
them will be closed.
Also, this will preserve QREXEC_AGENT_PID environment variable.

Fixes QubesOS/qubes-issues#2851
2017-07-05 02:17:43 +02:00
archlinux Remove DisposableVM savefile related files 2017-06-08 22:11:35 +02:00
autostart-dropins Merge branch 'autostart-dropins' 2015-09-02 01:16:19 +02:00
ci tests: add run-tests script, plug it into travis 2017-05-20 13:20:08 +02:00
debian qrexec: use PAM directly instead of calling su to setup the session 2017-07-05 02:17:43 +02:00
doc qrexec: fix reporting exit code in qrexec-client-vm 2017-06-21 11:21:40 +02:00
init Remove DisposableVM savefile related files 2017-06-08 22:11:35 +02:00
misc Update grub configuration 2017-06-21 07:04:26 +02:00
network Implement qrexec-based connection to updates proxy 2017-05-26 05:25:29 +02:00
patches.debian Stop anacron from starting in Debian using existing constraint on cron 2017-02-05 23:36:27 +00:00
pkgs archlinux: created build scripts 2013-04-17 01:22:32 +02:00
post-install.d Implement qubes.PostInstall service 2017-05-26 05:25:30 +02:00
qrexec qrexec: use PAM directly instead of calling su to setup the session 2017-07-05 02:17:43 +02:00
qubes-rpc Switch qubes.UpdatesProxy to socat 2017-06-10 23:11:01 +02:00
qubesagent tests: add run-tests script, plug it into travis 2017-05-20 13:20:08 +02:00
rpm_spec qrexec: use PAM directly instead of calling su to setup the session 2017-07-05 02:17:43 +02:00
test-packages tests: add run-tests script, plug it into travis 2017-05-20 13:20:08 +02:00
vm-init.d Do not load 'dummy-hcd' kernel module 2017-07-05 00:20:57 +02:00
vm-systemd Do not load 'dummy-hcd' kernel module 2017-07-05 00:20:57 +02:00
.coveragerc tests: add run-tests script, plug it into travis 2017-05-20 13:20:08 +02:00
.gitignore tests: add run-tests script, plug it into travis 2017-05-20 13:20:08 +02:00
.travis.yml travis: update to Qubes 4.0 repositories 2017-05-20 16:04:35 +02:00
debian-quilt debian: Refactor Debian quilt packaging for xen 2015-02-11 08:02:55 -05:00
LICENSE Added LICENSE 2010-04-05 21:21:27 +02:00
Makefile Do not load 'dummy-hcd' kernel module 2017-07-05 00:20:57 +02:00
Makefile.builder Merge remote-tracking branch 'qubesos/pr/46' 2017-07-04 13:39:06 +02:00
run-tests tests: add run-tests script, plug it into travis 2017-05-20 13:20:08 +02:00
series-debian-vm.conf Stop anacron from starting in Debian using existing constraint on cron 2017-02-05 23:36:27 +00:00
setup.py network: rewrite qubes-firewall daemon 2016-09-12 05:22:53 +02:00
version version 4.0.2 2017-06-24 02:19:15 +02:00