[arch-general] Disable pam_securetty.so

[Christian Rebischke]

On Thu, Nov 21, 2019 at 07:35:56PM +0100, Daan De Meyer via arch-general wrote:
> Hi,
> 
> I don't want to come across as impatient but I was wondering how I can
> accelerate handling of this particular issue:
> 
> https://bugs.archlinux.org/task/45903?project=1&string=pam
> 
> I've listed examples in the issue that pam_securetty has been disabled on
> other major distros. The main issue is that it prevents root login on
> systemd-nspawn containers. It should be easy to remove and there's a
> precedence in other distros. Any tips on how to proceed to get this fixed?
> 
> Regards,
> 
> Daan

Hi,
you can go around this problem via adding "pts/0" or "pts/1" and so on,
to the /etc/securetty file.

I wrote long ago a shell script to build such containers:

https://github.com/shibumi/mknspawn


The easier method is to just use containers from https://nspawn.org
https://nspawn.org builds containers with pts set in the /etc/securetty
file:

https://nspawn.org/images/

There is even a wrapper for it: https://github.com/nspawn/nspawn

Best regards,

shibumi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20191121/9db135c3/attachment.sig>