Ubuntu
sudo package

pam_limits.so removed from /etc/pam.d/sudo in Precise

Asked by Matt

Hello,

In the /etc/pam.d/sudo file installed by this package, pam_limits.so is no longer included in Precise.

It was present in /etc/pam.d/sudo in Lucid:

root@vm:~# grep pam_limits.so ./etc/pam.d/sudo
session required pam_limits.so

In Precise, the file looks like:

root@vm:~# cat ./etc/pam.d/sudo
#%PAM-1.0

@include common-auth
@include common-account
@include common-session-noninteractive
root@vm:~#

I haven't been able to find why this change was made and would be very grateful if anyone can explain why it was removed by default.

My intial thought was that it had been moved to common-session-noninteractive, but it appears that is not the case.

Thanks in advance,
Matt

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu sudo Edit question
Assignee:
No assignee Edit question
Solved by:
Matt
Solved:
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#1

The package changelog should show you

Revision history for this message
Matt (mattbostock) said : 		#2

Thanks for replying Andrew.

The changelog mentions the addition of common-session-noninteractive, but doesn't mention why pam_limits.so was removed (it's not present in common-session-noninteractive either):

--- sudo-1.7.4p6/debian/sudo.manpages 2011-05-23 07:01:02.000000000 +0000
+++ sudo-1.8.3p1/debian/sudo.manpages 2011-10-26 23:04:10.000000000 +0000
@@ -1,3 +1,3 @@
-build-simple/sudo.man
-build-simple/sudoers.man
-build-simple/visudo.man
+build-simple/doc/sudo.man
+build-simple/doc/sudoers.man
+build-simple/doc/visudo.man
diff -Nru sudo-1.7.4p6/debian/sudo.pam sudo-1.8.3p1/debian/sudo.pam
--- sudo-1.7.4p6/debian/sudo.pam 2011-05-23 07:01:02.000000000 +0000
+++ sudo-1.8.3p1/debian/sudo.pam 2011-10-26 23:04:10.000000000 +0000
@@ -2,6 +2,4 @@

 @include common-auth
 @include common-account
-
-session required pam_permit.so
-session required pam_limits.so
+@include common-session-noninteractive

Seems related to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519700

Any help is much appreciated.

Thanks,
Matt

Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#3

I recommend you report a bug.

Revision history for this message
Matt (mattbostock) said : 		#4

Thanks, I've logged a bug:

https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1268373