0004720: pam_echo.so echoes the message twice for sshd

ID	Project	Category	View Status	Date Submitted	Last Update

0004720	Rocky-Linux-9	pam	public	2023-11-09 16:58	2023-11-14 17:07

Reporter	Andy Wang	Assigned To
Priority	normal	Severity	minor	Reproducibility	always
Status	new	Resolution	open
Platform	x86_64	OS	Rocky Linux	OS Version	9.2

Summary	0004720: pam_echo.so echoes the message twice for sshd
Description	The pam_echo module in sshd's configuration should result in the specified text to be printed upon connecting to the machine via SSH. However, on Rocky Linux 9, the message is duplicated. My `/etc/pam.d/sshd`: ``` #%PAM-1.0 auth substack password-auth auth include postlogin account optional pam_echo.so foobar account required pam_sepermit.so account required pam_nologin.so account include password-auth password include password-auth # pam_selinux.so close should be the first session rule session required pam_selinux.so close session required pam_loginuid.so # pam_selinux.so open should only be followed by sessions to be executed in the user context session required pam_selinux.so open env_params session required pam_namespace.so session optional pam_keyinit.so force revoke session optional pam_motd.so session include password-auth session include postlogin ```
Steps To Reproduce	1. Edit `/etc/pam.d/sshd`, add line `account optional pam_echo.so foobar` under the existing `auth include postlogin` line 2. SSH into the machine 3. "foobar" will be printed to stderr twice
Tags	No tags attached.

Date Modified	Username	Field	Change
2023-11-09 16:58	Andy Wang	New Issue