[Bug 3723] sshd failed to close session when client specifies no remote command
bugzilla-daemon at mindrot.org
bugzilla-daemon at mindrot.org
Wed Aug 28 20:06:59 AEST 2024
https://bugzilla.mindrot.org/show_bug.cgi?id=3723
--- Comment #5 from Damien Miller <djm at mindrot.org> ---
Ah, pam_limits.so is session module? That's very late in the stack, and
session modules AFAIK are mostly intended for configuring the session
with things like environment variables and aren't really supposed to
block access.
In particular, a failure of a session module (e.g. pam_limits) is not
specified to be fatal to the session. This is the reason that sshd
doesn't terminate the session when the PAM session initialisation
fails.
--
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
More information about the openssh-bugs
mailing list