Bug 9817 - Live media: Live installation results in autologin being enabled
Summary: Live media: Live installation results in autologin being enabled
Status: RESOLVED INVALID
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: release_blocker normal
Target Milestone: ---
Assignee: Mageia Bug Squad
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 9799
  Show dependency treegraph
 
Reported: 2013-04-21 15:09 CEST by Colin Guthrie
Modified: 2013-09-11 01:41 CEST (History)
7 users (show)

See Also:
Source RPM:
CVE:
Status comment:


Attachments

Description Colin Guthrie 2013-04-21 15:09:38 CEST
After installing from the live media, the autologin system is enabled. The legacy autologin package does strange things with it's PAM session handling doesn't register it's session properly. This can cause some problems with ACLs after su'ing to root and exiting (see #9799).

As a result we should disable autologin after live installation and let the user login as normal via a DM which does things properly.

The autologin feature of KDE or GNOME can then be enabled which also works properly.

Longer term we should deprecate autologin as a separate package and use a different technique on the live media.

Reproducible: 

Steps to Reproduce:
Comment 1 Colin Guthrie 2013-04-21 15:10:03 CEST
Marking as a release blocker as it affects live media.

Priority: Normal => release_blocker

Colin Guthrie 2013-04-21 15:10:42 CEST

Blocks: (none) => 9799

Comment 2 Manuel Hiebel 2013-04-21 15:27:51 CEST
it's the case since years at mdv

CC: (none) => mageia, tmb

claire robinson 2013-04-21 16:28:59 CEST

CC: (none) => davidwhodgins, eeeemail

Comment 3 Colin Guthrie 2013-04-21 18:26:57 CEST
I've just done a Live GNOME install. Autologin was enabled. It was enabled via GDM config (AutomaticLogin=myusername;AutomaticLoginEnable=true) and the file /etc/sysconfig/autologin had AUTOLOGIN=yes but it did NOT specify a USER= line in that file.

This is both better and worse than the problem in bug #9799.

Better: GDM handles the autologin and all is well with session registration and ACLs etc.

Worse: The GNOME user settings does not recognise that the current user is set to Autologin (the gdm config being, I presume, a legacy method of configuring this) so the user cannot easily turn it off via GNOME tools.


I've yet to test with KDE but I'll do that next.
Comment 4 Colin Guthrie 2013-04-21 23:34:42 CEST
OK, I've tested on KDE now.

It has the same issue and ultimately the autologin capability from the autologin package is still unused and KDM is instead used for autologin.

In checking this, I noticed that the PAM configs for the kdm-np session are wrong in that they emit pam_namespace. Fixing this allows proper session registration in loginctl I have now corrected this in SVN.

http://svnweb.mageia.org/soft?view=revision&revision=7970

I still believe there is an issue whereby the GNOME autologin cannot be easily disabled using GNOME tools (unlike the KDE autologin which can be disabled by KDE tools), so we likely need some tweaks there, but I'll keep track of this separately.

As a result, I'll close this as invalid for now.

Status: NEW => RESOLVED
CC: (none) => lmenut, mageia
Resolution: (none) => INVALID

Comment 5 Kristoffer Grundström 2013-09-11 01:41:06 CEST
I think I have this issue as well.
GDM crashes.
Reopen again?

CC: (none) => kristoffer.grundstrom1983


Note You need to log in before you can comment on or make changes to this bug.