Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-131188

cronie: forward XDG_SESSION_CLASS to PAM [rhel-10.2]

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Normal Normal
    • rhel-10.2
    • None
    • cronie
    • None
    • None
    • rhel-base-utils-antfarm
    • 0
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      The recent backport of https://github.com/systemd/systemd/pull/38707 to RHEL-9 revealed that the assumption that cron implementations forward XDG_SESSION_CLASS to PAM is false for cronie.

      When a user attempts to set XDG_SESSION_CLASS within their crontab environment (e.g., to implement a "lighter" background session as intended by the systemd enhancement), the variable is not propagated correctly to the PAM stack. Consequently, pam_systemd.so cannot utilize this variable to correctly assign the desired session class.

      This results in background cron jobs being treated as standard interactive sessions for systemd's session management, which may lead to suboptimal resource management or incorrect behavior for background processes.

      Create a patch to cronie to ensure that the XDG_SESSION_CLASS environment variable, if set in the crontab job environment, is explicitly forwarded to the PAM stack during session setup.

              opohorel@redhat.com Ondrej Pohorelsky
              opohorel@redhat.com Ondrej Pohorelsky
              Ondrej Pohorelsky Ondrej Pohorelsky
              Jakub Heger Jakub Heger
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated: