#898949 schroot: PAM config should use common-session-noninteractive

Package:
schroot
Source:
schroot
Description:
Execute commands in a chroot environment
Submitter:
Ansgar Burchardt
Date:
2022-06-09 08:39:10 UTC
Severity:
important
Tags:
#898949#5
Date:
2018-05-17 17:36:11 UTC
From:
To:
The /etc/pam.d/schroot included in the package uses

  @include common-session

Please use

  @include common-session-noninteractive

instead as cron, at, ... already do.

On systems with libpam-systemd installed using common-session will
create a logind session which schroot should not do.

Ansgar
#898949#10
Date:
2019-09-07 09:30:17 UTC
From:
To:
In particular, creating a logind session results in $XDG_RUNTIME_DIR
being set inside the chroot, to a path that only exists outside the chroot.

Packages that use $XDG_RUNTIME_DIR are expected to have some sort of
reasonable fallback behaviour if it is not set at all (for example
dbus disables the features that need it, and some other packages use
~/.cache/foo as a fallback version of $XDG_RUNTIME_DIR/foo), but they
often do not have a graceful fallback path if $XDG_RUNTIME_DIR is set
to a path that is inaccessible, on the basis that they should do their
best to obey explicit requests from the user/environment ("the user is
always right").

    smcv
#898949#15
Date:
2019-09-08 21:41:52 UTC
From:
To:
Should this path be bound into the chroot?

Which Debian version introduced common-session-noninteractive?


Regards,

Roger
#898949#20
Date:
2022-03-16 15:32:05 UTC
From:
To:
It's hard to see how it's useful for schroot to create a logind session
on the host system at all.

pam 1.0.1-11, which is sufficiently long ago (2009, well before
oldoldoldstable) that it no longer needs to be specified in
dependencies.
#898949#25
Date:
2022-06-06 18:27:16 UTC
From:
To:
Ansgar Burchardt wrote...

Well, Ubuntu this this change a few months ago, and this didn't seem to
create significant damage. Let's give it a spin for 1.6.10-14

    Christoph
#898949#30
Date:
2022-06-06 21:18:37 UTC
From:
To:
Hello,

Bug #898949 in schroot reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/debian/schroot/-/commit/f2fc22cb2d37b135abeff3f895504471f13d8871

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/898949
#898949#33
Date:
2022-06-09 08:21:22 UTC
From:
To:
Hello,

Bug #898949 in schroot reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/debian/schroot/-/commit/acfddef6cc6ff433d65d29ebf5096e64073e7bd8

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/898949
#898949#38
Date:
2022-06-09 08:35:43 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
schroot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 898949@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christoph Biedl <debian.axhn@manchmal.in-ulm.de> (supplier of updated schroot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 09 Jun 2022 07:53:36 +0200
Source: schroot
Architecture: source
Version: 1.6.10-14
Distribution: unstable
Urgency: medium
Maintainer: Christoph Biedl <debian.axhn@manchmal.in-ulm.de>
Changed-By: Christoph Biedl <debian.axhn@manchmal.in-ulm.de>
Closes: 865110 898949 965348 988274
Changes:
 schroot (1.6.10-14) unstable; urgency=medium
 .
   * Support zstd compression for file based chroots. Closes: #988274
   * Provide a proper systemd service file. Closes: #865110
   * Update Portuguese translation. Closes: #965348
   * PAM: Use common-session-noninteractive. Closes: #898949
Checksums-Sha1:
 10249dede4100bcb777eee5b81bf265c6ed81a89 2224 schroot_1.6.10-14.dsc
 7d8a945abde54a633b48bd37cc8a6ecc0d6d51f0 156600 schroot_1.6.10-14.debian.tar.xz
 e69538424593ada17dd50d53660640298e4e5aa1 9555 schroot_1.6.10-14_powerpc.buildinfo
Checksums-Sha256:
 5928bfda9a07c7a8b2923b2c9460b1c37c723999280e87ff0246cca60f1c4183 2224 schroot_1.6.10-14.dsc
 1bc5627f4a5dab559c168f219e23f1d6e029c0ea34e4f0c4f6f72a6507d3a4ba 156600 schroot_1.6.10-14.debian.tar.xz
 1fb0bdafa3968580c955b81b17d78524c1c2a54b746a85da8f3428b202ef8677 9555 schroot_1.6.10-14_powerpc.buildinfo
Files:
 4e244c0ca9bdb8d2ef7dac34d23803b6 2224 admin optional schroot_1.6.10-14.dsc
 137ddcecf63cae2aa7fe47b520ea8f35 156600 admin optional schroot_1.6.10-14.debian.tar.xz
 5f98b999b1c056f012d7bf536aeb323d 9555 admin optional schroot_1.6.10-14_powerpc.buildinfo
-----BEGIN PGP SIGNATURE-----
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=Ya7F
-----END PGP SIGNATURE-----