OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Christian Kraemer (ckraemerginko.de)
Date: Mon Jun 18 2001 - 20:11:02 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi,

    Does anybody know why openssh (openssh-2.9p1) on a linux system does not call
    pam_open_session if no pty is used? In this way the session modules (in
    /etc/pam.d) are not activated.

    This is espacially anoying if you
    use pam_limits.so to set rlimits. Every user could
    cirrcumvent them easily by calling ssh in this way:
    ssh userserver /bin/sh

    I do not know if this issue has been disscused before and if this behavior is
    not alright .....

    cu Christian