Re: Fwd: Fedora22 Security Issue.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have changed my settings from digest. 

I will additionally try to add the pam_securetty.so to my su file when I get home tonight (JST)

Thanks

On Wed, Aug 19, 2015 at 11:04 AM, Ed Greshko <ed.greshko@xxxxxxxxxxx> wrote:
On 08/19/15 08:55, Scott Mattan wrote:
> Sorry about the other post, this one may not come in correctly either...
>
> In anycase, I will explain this after the main issue...
>
> I have the following differences in my /etc/pam.d/su file:
>
> Fedora22:
> #%PAM-1.0
> auth            sufficient      pam_rootok.so
> # Uncomment the following line to implicitly trust users in the "wheel" group.
> #auth           sufficient      pam_wheel.so trust use_uid
> # Uncomment the following line to require a user to be in the "wheel" group.
> #auth           required        pam_wheel.so use_uid
> auth            substack        system-auth
> auth            include         postlogin
> account         sufficient      pam_succeed_if.so uid = 0 use_uid quiet
> account         include         system-auth
> password        include         system-auth
> session         include         system-auth
> session         include         postlogin
> session         optional        pam_xauth.so
>
> CentOS6.6:
>
> #%PAM-1.0
> auth            sufficient      pam_rootok.so
> # Uncomment the following line to implicitly trust users in the "wheel" group.
> #auth           sufficient      pam_wheel.so trust use_uid
> # Uncomment the following line to require a user to be in the "wheel" group.
> #auth           required        pam_wheel.so use_uid
> auth            include        system-auth
> account         sufficient      pam_succeed_if.so uid = 0 use_uid quiet
> account         include         system-auth
> password        include         system-auth
> session         include         system-auth
> session         optional        pam_xauth.so
>
> When I try to mimic the settings for Fedora 22 in CentOS6.6 to test if this is the cause I become unable to open sockets.
>
> [ root@localhost ~ ]# su user
> could not open session

Use the original file in pam.d for su and try adding this after the pam_rootok.so line...

auth     required     pam_securetty.so


>
>
>
> Now for my lack of understanding of the mailing list.
>
> On the computer, I don't understand how to reply without having to copy information from multiple sources.  The entire list comes in a single post (very difficult to read) and replying to one means replying to all.

Sounds like you've picked "digest" for the list messages and your mailer doesn't quite know how to handle them.

>
> Additionally, operating on my phone doesn't even permit me to view the posts, and I must manually go to the archives to read any of the new additions.
>
> Is there a better way of viewing this list without having to copy paste titles and contents?
>
Modify your settings to not get a digest.


--
It seems most people that say they are "done talking about it" never really are until given the last word.

-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux