Thanks it saved my day. all is working now.

2014-02-04 12:50, Reco skrev:
Hi.

On Tue, Feb 04, 2014 at 12:08:27PM +0100, Stefan Eriksson wrote:
on a side not, this works ok, but it doesnt help me as I need the
sudo command to see the correct limits aswell.

Wheezy's version of /etc/pam.d/sudo lacks this line:

session    required   pam_limits.so

So, every time you use sudo - you keep shell limits from the original
session.

debian6:/# egrep -r pam_limits /etc/pam.d/
/etc/pam.d/sshd:session    required     pam_limits.so
/etc/pam.d/cron:session    required   pam_limits.so
/etc/pam.d/su:session    required   pam_limits.so
/etc/pam.d/login:session    required   pam_limits.so
/etc/pam.d/sudo:session required pam_limits.so

And, as you can see above, squeeze's version of /etc/pam.d/sudo has
pam_limits.so.

anyone seen this issue before or know if there is an added security
option one has to active in wheezy?

I just add pam_limits.so to /etc/pam.d/sudo during upgrade to wheezy.

Reco




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/52f1e3a2.4090...@glesys.se

Reply via email to