15767 2025-02-20 21:26:09 +0000 openssh session don't use /etc/environment nor /etc/security/pam_env.conf 2026-02-03 14:23:07 +0000 1 1 7 Build System, Metadata & Runtime OE-Core connectivity 5.0.7 x86 x86_64 RESOLVED FIXED Medium+ normal 5.3 M1 1 trent.piepho mingli.yu ccasciato meta.mr.watcher meta.watcher mingli.yu randy.macleod yoann.congal --- --- Don't know oldest_to_newest 101192 0 trent.piepho 2025-02-20 21:26:09 +0000 It should be possible to add environment variables to all sessions via /etc/environment or in /etc/security/pam_env.conf This works for console logins, but not with openssh logins. The problem appears to be that nothing in /etc/pam.d/sshd will load pam_env.so. Perhaps the libpam package should add this to /etc/pam.d/common-session? This file is referenced by the sshd pam configuration. E.g., add this: >session required pam_env.so readenv=1 101239 1 randy.macleod 2025-02-27 15:33:37 +0000 Interesting suggestion. Debian does this. Can you send a patch to the list? https://docs.yoctoproject.org/contributor-guide/index.html 101456 2 randy.macleod 2025-03-21 20:12:11 +0000 Trent do you have time for this? I've CCed Mingli who may be able to work on it if you can't or if you don't reply by March 25, 2025. 101617 3 randy.macleod 2025-04-10 15:02:36 +0000 Mingli, Can you work on this and maybe email Trent if needed. He didn't reply to the YP BZ NEEDINFO emails. 101752 4 mingli.yu 2025-04-25 01:09:21 +0000 Fixed by https://git.openembedded.org/openembedded-core/commit/?id=4e6762f5967b1996cf31ae100fa49e775dfb2866 https://git.openembedded.org/openembedded-core/commit/?id=4340cd7da25c69424915f29c2bb9531fc33617e6 104089 5 ccasciato 2026-01-28 17:43:36 +0000 [meta-selinux][PATCH 0/1] openssh: Add pam_env support https://lists.yoctoproject.org/g/yocto-patches/topic/meta_selinux_patch_0_1/117511888 [meta-selinux][PATCH 1/1] openssh: Add pam_env support https://lists.yoctoproject.org/g/yocto-patches/topic/meta_selinux_patch_1_1/117511975 104142 6 ccasciato 2026-02-03 14:23:07 +0000 Merged https://git.yoctoproject.org/meta-selinux/commit/?id=d670531ad7e6cd0dac08010fbd9b604501391245