Bug 72888 - pam module does not start active session
Summary: pam module does not start active session
Status: NEW
Alias: None
Product: ConsoleKit
Classification: Unclassified
Component: PAM module (show other bugs)
Version: unspecified
Hardware: All Linux (All)
: medium normal
Assignee: Martin Pitt
QA Contact:
Depends on:
Reported: 2013-12-19 20:58 UTC by Hans Freitag
Modified: 2013-12-19 20:58 UTC (History)
2 users (show)

See Also:
i915 platform:
i915 features:

pam module should start an active session (4.44 KB, text/plain)
2013-12-19 20:58 UTC, Hans Freitag

Description Hans Freitag 2013-12-19 20:58:52 UTC
Created attachment 91001 [details]
pam module should start an active session

I wrote a patch to the pam-ck-connector so that the created session is active,
because I think this solves some of the bugs listed to the package in the debian bts for consolekit and various display managers. 

The bigest advantage is that you can use any Display Manager other than
gdm again by creating an active session via pam. The other DMs previously
used ck-launch-session at user level to create an active session but this 
is not possible anymore due to security risks.  

- I added the parameter active to the ck-connector library call to work
  like described in the consolekit dbus description.
- I modified the pam module to launch an active session
- I added a nonactive parameter to the pam module
- I updated the manpage

The patch is attached to this bugreport.
I hope this does not raise to much new security issues, but i don't see a point against from my perspective. 



Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.