lynix
22.02.09, 18:05
Hallo, zusammen!
Ich habe erfolgreich pam_mount integriert und lasse darüber mein verschlüsseltes Homeverzeichnis beim Login mounten. Funktioniert beim Login über ein Terminal auch wunderbar, lediglich beim Login am X-Server über GDM oder SLiM schlägt das unmounten beim Logout fehl:
gdm:
Feb 22 18:22:02 thor gdm-binary[18440]: pam_unix(gdm:session): session closed for user lynix
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:592): received order to close things
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(misc.c:38): Session close: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18440]: command: [pmvarrun] [-u] [lynix] [-o] [-1]
Feb 22 18:22:02 thor gdm-binary[18664]: pam_mount(misc.c:38): set_myuid<pre>: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18664]: pam_mount(misc.c:38): set_myuid<post>: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:418): pmvarrun says login count is 0
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:673): going to unmount
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:172): Mount info: globalconf, user=lynix <volume fstype="crypt" server="(null)" path="/dev/sda6" mountpoint="/home/lynix" cipher="(null)" fskeypath="(null)" fskeycipher="(null)" fskeyhash="(null)" options="" /> fstab=0
Feb 22 18:22:02 thor gdm-binary[18440]: command: [umount.crypt] [/home/lynix]
Feb 22 18:22:02 thor gdm-binary[18665]: pam_mount(misc.c:38): set_myuid<pre>: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18665]: pam_mount(misc.c:38): set_myuid<post>: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:64): umount messages:
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): umount: /home/lynix: device is busy.
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): (In some cases useful info about processes that use
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): the device is found by lsof(8) or fuser(1))
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): umount /home/lynix failed with run_sync status 1
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): Command failed: Device busy
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): umount.crypt(crypto-dmc.c:160): Could not unload dm-crypt device "/dev/mapper/_dev_sda6", cryptsetup returned HXproc status 240
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:676): unmount of /dev/sda6 failed
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:633): pam_mount execution complete
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:115): Clean global config (0)
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:132): clean system authtok=0x1521190 (0)
Daraus ersehe ich, dass (wie im Bugtracker von pam_mount beschrieben) GDM nicht sicherstellt, dass keine Prozesse mehr auf dem zu unmountenden Verzeichnis arbeiten.
Nun gibt es in der pam_mount.conf.xml ja die (undokumentierten) Optionen wait="0" hup="0" term="0" kill="1". Weiß jemand, wie man die benutzt?
SLiM:
Feb 22 18:34:02 thor slim: pam_unix(slim:session): session closed for user lynix
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:592): received order to close things
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): Session close: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: command: [pmvarrun] [-u] [lynix] [-o] [-1]
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): set_myuid<pre>: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): set_myuid<post>: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:416): error reading login count from pmvarrun
Feb 22 18:34:02 thor slim: pam_mount(mount.c:673): going to unmount
Feb 22 18:34:02 thor slim: pam_mount(mount.c:172): Mount info: globalconf, user=lynix <volume fstype="crypt" server="(null)" path="/dev/sda6" mountpoint="/home/lynix" cipher="(null)" fskeypath="(null)" fskeycipher="(null)" fskeyhash="(null)" options="" /> fstab=0
Feb 22 18:34:02 thor slim: command: [umount.crypt] [/home/lynix]
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): set_myuid<pre>: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): set_myuid<post>: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: pam_mount(mount.c:676): unmount of /dev/sda6 failed
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:633): pam_mount execution complete
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:115): Clean global config (0)
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:132): clean system authtok=0x1276b20 (0)
Ich schätze mal bei SLiM ist es ein anderes Problem, weiß hier jemand Rat?
Vielen Dank für jeden Tip im Voraus!
Gruß
lynix
Ich habe erfolgreich pam_mount integriert und lasse darüber mein verschlüsseltes Homeverzeichnis beim Login mounten. Funktioniert beim Login über ein Terminal auch wunderbar, lediglich beim Login am X-Server über GDM oder SLiM schlägt das unmounten beim Logout fehl:
gdm:
Feb 22 18:22:02 thor gdm-binary[18440]: pam_unix(gdm:session): session closed for user lynix
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:592): received order to close things
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(misc.c:38): Session close: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18440]: command: [pmvarrun] [-u] [lynix] [-o] [-1]
Feb 22 18:22:02 thor gdm-binary[18664]: pam_mount(misc.c:38): set_myuid<pre>: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18664]: pam_mount(misc.c:38): set_myuid<post>: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:418): pmvarrun says login count is 0
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:673): going to unmount
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:172): Mount info: globalconf, user=lynix <volume fstype="crypt" server="(null)" path="/dev/sda6" mountpoint="/home/lynix" cipher="(null)" fskeypath="(null)" fskeycipher="(null)" fskeyhash="(null)" options="" /> fstab=0
Feb 22 18:22:02 thor gdm-binary[18440]: command: [umount.crypt] [/home/lynix]
Feb 22 18:22:02 thor gdm-binary[18665]: pam_mount(misc.c:38): set_myuid<pre>: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18665]: pam_mount(misc.c:38): set_myuid<post>: (uid=0, euid=0, gid=100, egid=0)
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:64): umount messages:
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): umount: /home/lynix: device is busy.
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): (In some cases useful info about processes that use
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): the device is found by lsof(8) or fuser(1))
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): umount /home/lynix failed with run_sync status 1
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): Command failed: Device busy
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:67): umount.crypt(crypto-dmc.c:160): Could not unload dm-crypt device "/dev/mapper/_dev_sda6", cryptsetup returned HXproc status 240
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(mount.c:676): unmount of /dev/sda6 failed
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:633): pam_mount execution complete
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:115): Clean global config (0)
Feb 22 18:22:02 thor gdm-binary[18440]: pam_mount(pam_mount.c:132): clean system authtok=0x1521190 (0)
Daraus ersehe ich, dass (wie im Bugtracker von pam_mount beschrieben) GDM nicht sicherstellt, dass keine Prozesse mehr auf dem zu unmountenden Verzeichnis arbeiten.
Nun gibt es in der pam_mount.conf.xml ja die (undokumentierten) Optionen wait="0" hup="0" term="0" kill="1". Weiß jemand, wie man die benutzt?
SLiM:
Feb 22 18:34:02 thor slim: pam_unix(slim:session): session closed for user lynix
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:592): received order to close things
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): Session close: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: command: [pmvarrun] [-u] [lynix] [-o] [-1]
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): set_myuid<pre>: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): set_myuid<post>: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:416): error reading login count from pmvarrun
Feb 22 18:34:02 thor slim: pam_mount(mount.c:673): going to unmount
Feb 22 18:34:02 thor slim: pam_mount(mount.c:172): Mount info: globalconf, user=lynix <volume fstype="crypt" server="(null)" path="/dev/sda6" mountpoint="/home/lynix" cipher="(null)" fskeypath="(null)" fskeycipher="(null)" fskeyhash="(null)" options="" /> fstab=0
Feb 22 18:34:02 thor slim: command: [umount.crypt] [/home/lynix]
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): set_myuid<pre>: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: pam_mount(misc.c:38): set_myuid<post>: (uid=0, euid=0, gid=0, egid=0)
Feb 22 18:34:02 thor slim: pam_mount(mount.c:676): unmount of /dev/sda6 failed
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:633): pam_mount execution complete
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:115): Clean global config (0)
Feb 22 18:34:02 thor slim: pam_mount(pam_mount.c:132): clean system authtok=0x1276b20 (0)
Ich schätze mal bei SLiM ist es ein anderes Problem, weiß hier jemand Rat?
Vielen Dank für jeden Tip im Voraus!
Gruß
lynix