You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Using version v0.11 released on Aug 16, 2018, when deployed on OCP recieving following errors for any user manipulation command - for example su
su 432891 - [meta sequenceId="7"] PAM audit_log_acct_message() failed: Operation not permitted
su 432891 - [meta sequenceId="8"] pam_authenticate: System error
The issue was fixed at Jul 8, 2016, but than removed aug 1, 2017 v0.10.0 after wrong conclusion that it's not needed (see changelog: Evaluate if fix_pam_bug is still needed #404)
The workaround of rebuilding PAM with audit disabled is working for me - but it's too heavy and not clean / secured enough.
Another workaround is to use, setuser instead of su in my code - but it doesn't solve 3rd party code like syslog, stats & cron the relies heavily on su
The text was updated successfully, but these errors were encountered:
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
Due to the lack of activity in the last 5 days since it was marked as "stale", we proceed to close this Issue. Do not hesitate to reopen it later if necessary.
Using version v0.11 released on Aug 16, 2018, when deployed on OCP recieving following errors for any user manipulation command - for example
su
The issue was fixed at Jul 8, 2016, but than removed aug 1, 2017 v0.10.0 after wrong conclusion that it's not needed (see changelog: Evaluate if fix_pam_bug is still needed #404)
The workaround of rebuilding PAM with audit disabled is working for me - but it's too heavy and not clean / secured enough.
Another workaround is to use,
setuser
instead ofsu
in my code - but it doesn't solve 3rd party code like syslog, stats & cron the relies heavily onsu
The text was updated successfully, but these errors were encountered: