From f581d8ead7b1454864b9ff2e90a2f5e178acbf07 Mon Sep 17 00:00:00 2001 From: Matthias Klumpp Date: Sat, 14 Dec 2024 22:43:21 +0100 Subject: [PATCH] pam: debian: Explicitly include pam_limits for xrdp sessions This is required, as on Debian, pam_limits is not automatically included for common sessions, and only for "login" sessions and session managers. So, xrdp has to include it explicitly to make limits take effect. See https://wiki.debian.org/Limits for details. --- instfiles/pam.d/xrdp-sesman.debian | 2 ++ 1 file changed, 2 insertions(+) diff --git a/instfiles/pam.d/xrdp-sesman.debian b/instfiles/pam.d/xrdp-sesman.debian index 2dd2ecb8b2..b97711bbc1 100644 --- a/instfiles/pam.d/xrdp-sesman.debian +++ b/instfiles/pam.d/xrdp-sesman.debian @@ -9,6 +9,8 @@ auth required pam_env.so readenv=1 envfile=/etc/default/locale @include common-password +# Ensure resource limits are applied +session required pam_limits.so # Set the loginuid process attribute. session required pam_loginuid.so # Update wtmp/lastlog