pam_limits.so removed from /etc/pam.d/sudo in Precise

Asked by Matt on 2014-01-09

Hello,

In the /etc/pam.d/sudo file installed by this package, pam_limits.so is no longer included in Precise.

It was present in /etc/pam.d/sudo in Lucid:

root@vm:~# grep pam_limits.so ./etc/pam.d/sudo
session required pam_limits.so

In Precise, the file looks like:

root@vm:~# cat ./etc/pam.d/sudo
#%PAM-1.0

@include common-auth
@include common-account
@include common-session-noninteractive
root@vm:~#

I haven't been able to find why this change was made and would be very grateful if anyone can explain why it was removed by default.

My intial thought was that it had been moved to common-session-noninteractive, but it appears that is not the case.

Thanks in advance,
Matt

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu sudo Edit question
Assignee:
No assignee Edit question
Solved by:
Matt
Solved:
2014-01-12
Last query:
2014-01-12
Last reply:
2014-01-11

The package changelog should show you

Matt (mattbostock) said : #2

Thanks for replying Andrew.

The changelog mentions the addition of common-session-noninteractive, but doesn't mention why pam_limits.so was removed (it's not present in common-session-noninteractive either):

--- sudo-1.7.4p6/debian/sudo.manpages 2011-05-23 07:01:02.000000000 +0000
+++ sudo-1.8.3p1/debian/sudo.manpages 2011-10-26 23:04:10.000000000 +0000
@@ -1,3 +1,3 @@
-build-simple/sudo.man
-build-simple/sudoers.man
-build-simple/visudo.man
+build-simple/doc/sudo.man
+build-simple/doc/sudoers.man
+build-simple/doc/visudo.man
diff -Nru sudo-1.7.4p6/debian/sudo.pam sudo-1.8.3p1/debian/sudo.pam
--- sudo-1.7.4p6/debian/sudo.pam 2011-05-23 07:01:02.000000000 +0000
+++ sudo-1.8.3p1/debian/sudo.pam 2011-10-26 23:04:10.000000000 +0000
@@ -2,6 +2,4 @@

 @include common-auth
 @include common-account
-
-session required pam_permit.so
-session required pam_limits.so
+@include common-session-noninteractive

Seems related to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519700

Any help is much appreciated.

Thanks,
Matt

I recommend you report a bug.