[systemd-devel] [PATCH weston] doc/systemd: system service example

[Lennart Poettering]

On Do, 30.11.17 12:09, Pekka Paalanen (ppaalanen at gmail.com) wrote:

> > Hmm, what is this about?
> > 
> > This is racy, as the session ID is not really reliably predictable,
> > and is synthesized in different contexts in different ways, for
> > example depnding on whether audit is enabled in the kernel it might be
> > session-1.scope rather than session-c1.scope.
> 
> Hi Lennart,
> 
> this is the bit Martyn talked you in person some time ago, maybe Martyn
> could refresh your memory?

Oh, did we? I don't remember, sorry!

> > Piggy-backing on "login" is a bad idea. "login" is a text tool, and
> > thus the PAM rules for it usually pull in some TTY specific PAM
> > modules. YOu shoudl really use your own PAM fragment here, and
> > configure only the bits you need.
> 
> Ok. Is there any guide or example I could point people to, so that they
> can write their own stuff correctly? Any example I could put into
> Weston docs?

Unfortunately PAM is awful and highly distro-specific. It's not really
possible to write PAM snippets that work generically on all
distros. Sorry. The distros even patch PAM differently, so that
slightly difference constructs are available...

Lennart

-- 
Lennart Poettering, Red Hat