#1140888 openrc: Userservices need extra pam tweaks to work

Package:
openrc
Source:
openrc
Description:
dependency based service manager (runlevel change mechanism)
Submitter:
Matthias Geiger
Date:
2026-08-20 01:01:02 UTC
Severity:
normal
#1140888#5
Date:
2026-06-27 21:53:34 UTC
From:
To:
Hi,

thanks for maintaining openrc. After talking with the maintainer on IRC,
I think currently, openrc user services do not work. Copying attached
service to /etc/user/init.d and running rc-update --user
gnome-keyring-daemon add errors because it can't find the needed
runlevels in .config/rc/runlevels. This should be created automatically
by pam_openrc according to upstream:

23:15 < navi> werdahias: common-session i'd say
23:15 < navi> gentoo puts it in system-login
23:15 < navi> you also want to put common_session into /etc/pam.d/openrc-run or similar
23:16 < werdahias> navi: thanks!

/etc/pam.d/common-session has pam_elogind in there, but not pam_openrc;
so I believe it should be added there. PAM is not really my area of
expertise, happy to test any changes.

best,

werdahias


- -- System Information:
Debian Release: forky/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 7.0.7+deb14-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: OpenRC (via /run/openrc), PID 1: init
LSM: AppArmor: enabled

Versions of packages openrc depends on:
ii  insserv      1.27.0-1
ii  libaudit1    1:4.1.2-1+b1
ii  libc6        2.42-17
ii  libcap2      1:2.78-1
ii  libeinfo1    0.63.2-1
ii  libpam0g     1.7.0-6
ii  librc1t64    0.63.2-1
ii  libselinux1  3.10-1
ii  mount        2.42.2-1

openrc recommends no packages.

Versions of packages openrc suggests:
pn  policycoreutils  <none>
ii  sysvinit-core    3.18-1

- -- no debconf information
-----BEGIN PGP SIGNATURE-----

iIsEARYKADMWIQQUWTv/Sl6/b+DpcW7svtu2B7myvgUCakBGWRUcd2VyZGFoaWFz
QGRlYmlhbi5vcmcACgkQ7L7btge5sr40FAEA7K1txql1iqbo/Jx4BDKxhOI9dZi6
qS/EmAgpbwbEWO0A/3FRhoAFjHS62Dftd65cPOhZmnKksv7zJvFS2KMa7pMH
=4549
-----END PGP SIGNATURE-----

#1140888#8
Date:
2026-06-28 07:44:53 UTC
From:
To:
Matthias,

I think this is already in place, but disabled by default. See changelog for
0.63-1:

   * openrc --user: add pam-auth-update(8) config, disabled by default.

If you run

 sudo pam-auth-update

you can enable openrc pam session.

I suppose there is a question if it should be enabled by default.

Best wishes

Mark

#1140888#13
Date:
2026-08-20 00:31:53 UTC
From:
To:
The Debian NEW review of openrc 0.63.3-3 has been completed.

Decision: ACCEPTED
Reviewer: Andrew McMillan

Review comment:

Hi,

Please adjust debian/copyright to rename "BSD-2-clauses" to the more standard "BSD-2-clause" terminology.  There are also a couple of authors identified which you may want to recognise as well.

Thanks!

Full review details: https://dfsg-new-queue.debian.org/reviews/openrc

#1140888#18
Date:
2026-08-20 01:00:18 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
openrc, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1140888@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mark Hindley <leepen@debian.org> (supplier of updated openrc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 19 Aug 2026 17:21:17 +0100
Source: openrc
Binary: libeinfo-dev libeinfo1 librc-dev librc1t64 openrc openrc-dbus-user-session openrc-init
Architecture: source amd64 all
Version: 0.63.3-3
Distribution: experimental
Urgency: medium
Maintainer: OpenRC Debian Maintainers <openrc@packages.debian.org>
Changed-By: Mark Hindley <leepen@debian.org>
Description:
 libeinfo-dev - dependency based service manager (pretty console display developm
 libeinfo1  - dependency based service manager (pretty console display library)
 librc-dev  - dependency based service manager (runtime development)
 librc1t64  - dependency based service manager (runtime library)
 openrc     - dependency based service manager (runlevel change mechanism)
 openrc-dbus-user-session - simple interprocess messaging system (openrc --user integration)
 openrc-init - dependency based service manager (init package)
Closes: 1140888
Changes:
 openrc (0.63.3-3) experimental; urgency=medium
 .
   * d/control: remove empty Multi-Arch field (cruft).
 .
 openrc (0.63.3-2) experimental; urgency=medium
 .
   [ Mo Zhou ]
   * Drop myself from uploaders.
 .
   [ Matthias Geiger ]
   * Provide openrc-init package.
 .
   [ Mark Hindley ]
   * d/control: change to debhelper compat 14 and remove obsolete
     substvars.
   * Drop unnecessary use of dh-exec.
   * Provide openrc-dbus-user-session package (Closes: #1140888).
   * d/copyright: add myself in respect of debian/*.
   * Add openrc-init manpage symlinks for shutdown(8), halt(8), poweroff(8)
     and reboot(8).
   * Add diversions for manpage symlinks to avoid file conflict with
     manpages-*.
   * d/NEWS.openrc: update.
Checksums-Sha1:
 d3d1141bafb753852dbccb30d227490ae4e3ea07 2439 openrc_0.63.3-3.dsc
 b5e5196a20c4272e7ef80cedf27a119178f311a2 29648 openrc_0.63.3-3.debian.tar.xz
 54e2710348955917c65bddaf2483ee39e7de6c68 10492 libeinfo-dev_0.63.3-3_amd64.deb
 e47421b724753c618c779f46f286361b8845235a 14496 libeinfo1_0.63.3-3_amd64.deb
 9e1e3d300fbba8f33063354f172f0ba65d46dd34 21052 librc-dev_0.63.3-3_amd64.deb
 a5526d7f5fe03ce65f468ac8cf90f2557ef6820e 35920 librc1t64_0.63.3-3_amd64.deb
 048722da5c60eb51fc946e5d57563229f7a1e28a 7920 openrc-dbus-user-session_0.63.3-3_all.deb
 ef337bc695d67a56cfd81ec44c47addc1d9882d3 7976 openrc-init_0.63.3-3_all.deb
 adac89b17eeaa82c4609b0f3843ed630e828c664 8542 openrc_0.63.3-3_amd64.buildinfo
 26f1a9fd4f92bea0a75e385219acc5cd0cf4ccc9 200620 openrc_0.63.3-3_amd64.deb
Checksums-Sha256:
 7eae605c590d76ccc1af1be7e2b57b49218994a9f4f156c67a2c5463dc800a1c 2439 openrc_0.63.3-3.dsc
 f8bdb632210bd528951d6567b7e1bed38041c0e8f7e7f7bf390b1aed065f31cc 29648 openrc_0.63.3-3.debian.tar.xz
 dedd0cefaab13d8b5864bb03d337f1e0edfd43dbdbd013a1360e2b1c59d52b58 10492 libeinfo-dev_0.63.3-3_amd64.deb
 a9b30ec5fa559881539ebf9a81316e5522fa481b124de3ed63a946a631b69c0f 14496 libeinfo1_0.63.3-3_amd64.deb
 858eaeaf4d13d9be1b3dd4c4e2fe6a06f100b2f074bda974d49d4976e29f6e50 21052 librc-dev_0.63.3-3_amd64.deb
 54d0a9436ecba98c1b3c749305ca3eb5b516a32fa66f1056227339e987b1420e 35920 librc1t64_0.63.3-3_amd64.deb
 9038dafe5b87df350ac4264db21b757c51c4bd5bd31b10e638f2ee2a537c44b5 7920 openrc-dbus-user-session_0.63.3-3_all.deb
 eafbf93002ea47ecba37a7bba6d24aec53dd76a8ebcab5777d9c080bc8c634cf 7976 openrc-init_0.63.3-3_all.deb
 528f1f769b2c90a74e435433d8ceb46bc904b9adc02aec25bf98f6686048d41b 8542 openrc_0.63.3-3_amd64.buildinfo
 325f4ed345fd569244a85ff335d96556ede1504138e84d97af9adbf7a6f02c89 200620 openrc_0.63.3-3_amd64.deb
Files:
 c0727af9e6b4c4ee5fc74e3fce69b80e 2439 admin optional openrc_0.63.3-3.dsc
 979f83f39de11eccc2094901151e2c22 29648 admin optional openrc_0.63.3-3.debian.tar.xz
 854c410db8d5971c2e33abf24b58583d 10492 libdevel optional libeinfo-dev_0.63.3-3_amd64.deb
 06ed70468bb84ed6deee2454b2d253e8 14496 libs optional libeinfo1_0.63.3-3_amd64.deb
 813de03450844ed06fb7df529f7dfa05 21052 libdevel optional librc-dev_0.63.3-3_amd64.deb
 0b61b1d52ba8991680412e64615de407 35920 libs optional librc1t64_0.63.3-3_amd64.deb
 9036b80f18ab04989c98790396ef575f 7920 admin optional openrc-dbus-user-session_0.63.3-3_all.deb
 dc4ec5e6c96b7ea0741771a78fcbd545 7976 admin optional openrc-init_0.63.3-3_all.deb
 319781f6cb7c90c4a25b3f147d008291 8542 admin optional openrc_0.63.3-3_amd64.buildinfo
 f4003440b3027434db24a2414672ffb1 200620 admin optional openrc_0.63.3-3_amd64.deb
-----BEGIN PGP SIGNATURE-----
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=cqUU
-----END PGP SIGNATURE-----