<HTML><BODY><br><br><br>Fri, 09 May 2014 11:07:45 +0000 от Colin Walters <walters@verbum.org>:<br>
<blockquote style="border-left:1px solid #0857A6; margin:10px; padding:0 0 0 10px;">
<div id="">
<div class="js-helper js-readmsg-msg">
<style type="text/css"></style>
<div>
<base target="_self" href="https://e.mail.ru/">
<div id="style_13996339240000000742_BODY"><br>
<br>
On Mon, May 5, 2014 at 6:48 AM, dedede gfgfgf trtrtrtrtrtr <br>
<<a href="/compose?To=s.kabanov70@mail.ru">s.kabanov70@mail.ru</a>> wrote:<br>
> Investigations showed that since in pam module we started to dup fifo <br>
> descriptor problem appeared. Dup does not set O_CLOEXEC flag. So <br>
> after fork/exec<br>
> all children processes have that descriptor and when parent which <br>
> open pam session dies, children processes continue to run.<br>
<br>
I think you should change your login program to close unnecessary FDs <br>
before executing children. <br>
<br>
<br>
<br>
</div>
<base target="_self" href="https://e.mail.ru/">
</div>
</div>
</div>
</blockquote>
Hello Colin.<br> I am speaking about descriptors in systemd pam module. Application <br> which use pam can not control it. Because of:<br> session_fd = dup(session_fd);<br><br> in pam-module.c we have now descriptor which does not have O_CLOEXEC<br> set. So it will not be closed automatically during exec of children processes<br> and because of this logind will not know that process which opened pam <br> session exited.<br><br> Sergei<br><br><br></BODY></HTML>