Bug 863884

Summary:	sys-auth/pambase: /etc/pam.d/runuser includes pam_env.so twice
Product:	Gentoo Linux	Reporter:	Michael Jones <gentoo>
Component:	Current packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	UNCONFIRMED ---
Severity:	normal	CC:	jstein, sam, zlogene
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Michael Jones 2022-08-06 05:56:00 UTC

/etc/pam.d/runuser
auth       sufficient   pam_rootok.so
auth       required     pam_wheel.so use_uid
auth       include              system-auth
account    include              system-auth
password   include              system-auth
session    include              system-auth
session    required     pam_env.so
session    optional             pam_xauth.so



Notice the session block includes pam_env.so after it imports from system-auth.

system-auth 's session block always starts with

session		required	pam_limits.so
session		required	pam_env.so

in the template file from pambase https://github.com/gentoo/pambase/blob/master/templates/system-session.tpl

Reproducible: Always