A core dump of the daemon could expose the user's plaintext password. atrium wipes its own copies, but PAM modules running inside the calling process may retain it (e.g. pam_kwallet5 does not wipe its copy).
Fix: set prctl(PR_SET_DUMPABLE, 0) in the session runner.
A core dump of the daemon could expose the user's plaintext password. atrium wipes its own copies, but PAM modules running inside the calling process may retain it (e.g. pam_kwallet5 does not wipe its copy).
Fix: set
prctl(PR_SET_DUMPABLE, 0)in the session runner.