3af55c5cb3
Instead of calling 'su' to switch the user, use own implementation of this. Thanks to PAM it's pretty simple. The main reason is to have control over process waiting for session termination (to call pam_close_sesion/pam_end). Especially we don't want it to keep std* fds open, which would prevent qrexec-agent from receiving EOF when one of them will be closed. Also, this will preserve QREXEC_AGENT_PID environment variable. Fixes QubesOS/qubes-issues#2851
10 lines
281 B
Plaintext
10 lines
281 B
Plaintext
etc/pam.d/qrexec
|
|
lib/systemd/system/qubes-qrexec-agent.service
|
|
usr/bin/qrexec-client-vm
|
|
usr/bin/qrexec-fork-server
|
|
usr/lib/qubes/qrexec-agent
|
|
usr/lib/qubes/qrexec-client-vm
|
|
usr/lib/qubes/qrexec_client_vm
|
|
usr/lib/qubes/qubes-rpc-multiplexer
|
|
usr/share/man/man1/qrexec-client-vm.1.gz
|