Bug 9817

Summary:	Live media: Live installation results in autologin being enabled
Product:	Mageia	Reporter:	Colin Guthrie <mageia>
Component:	RPM Packages	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED INVALID	QA Contact:
Severity:	normal
Priority:	release_blocker	CC:	davidwhodgins, eeeemail, lmenut, lovaren, mageia, mageia, tmb
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:		CVE:
Status comment:
Bug Depends on:
Bug Blocks:	9799

Description Colin Guthrie 2013-04-21 15:09:38 CEST

After installing from the live media, the autologin system is enabled. The legacy autologin package does strange things with it's PAM session handling doesn't register it's session properly. This can cause some problems with ACLs after su'ing to root and exiting (see #9799).

As a result we should disable autologin after live installation and let the user login as normal via a DM which does things properly.

The autologin feature of KDE or GNOME can then be enabled which also works properly.

Longer term we should deprecate autologin as a separate package and use a different technique on the live media.

Reproducible: 

Steps to Reproduce:

Comment 1 Colin Guthrie 2013-04-21 15:10:03 CEST

Marking as a release blocker as it affects live media.

Priority: Normal => release_blocker

Colin Guthrie 2013-04-21 15:10:42 CEST

Blocks: (none) => 9799

Comment 2 Manuel Hiebel 2013-04-21 15:27:51 CEST

it's the case since years at mdv

CC: (none) => mageia, tmb

claire robinson 2013-04-21 16:28:59 CEST

CC: (none) => davidwhodgins, eeeemail

Comment 3 Colin Guthrie 2013-04-21 18:26:57 CEST

I've just done a Live GNOME install. Autologin was enabled. It was enabled via GDM config (AutomaticLogin=myusername;AutomaticLoginEnable=true) and the file /etc/sysconfig/autologin had AUTOLOGIN=yes but it did NOT specify a USER= line in that file.

This is both better and worse than the problem in bug #9799.

Better: GDM handles the autologin and all is well with session registration and ACLs etc.

Worse: The GNOME user settings does not recognise that the current user is set to Autologin (the gdm config being, I presume, a legacy method of configuring this) so the user cannot easily turn it off via GNOME tools.


I've yet to test with KDE but I'll do that next.

Comment 4 Colin Guthrie 2013-04-21 23:34:42 CEST

OK, I've tested on KDE now.

It has the same issue and ultimately the autologin capability from the autologin package is still unused and KDM is instead used for autologin.

In checking this, I noticed that the PAM configs for the kdm-np session are wrong in that they emit pam_namespace. Fixing this allows proper session registration in loginctl I have now corrected this in SVN.

http://svnweb.mageia.org/soft?view=revision&revision=7970

I still believe there is an issue whereby the GNOME autologin cannot be easily disabled using GNOME tools (unlike the KDE autologin which can be disabled by KDE tools), so we likely need some tweaks there, but I'll keep track of this separately.

As a result, I'll close this as invalid for now.

Status: NEW => RESOLVED
CC: (none) => lmenut, mageia
Resolution: (none) => INVALID

Comment 5 Kristoffer Grundström 2013-09-11 01:41:06 CEST

I think I have this issue as well.
GDM crashes.
Reopen again?

CC: (none) => kristoffer.grundstrom1983