Bug#1018106: re: sshd: pam_env(sshd:session): deprecated reading of user environment enabled

On Wed, 1 Feb 2023 04:43:07 -0500 nick black <[email protected]> wrote:
 > the cause of this output is the following line in /etc/pam.d/sshd:
 >
 > # In Debian 4.0 (etch), locale-related environment variables were 
moved to
 > # /etc/default/locale, so read that as well.
 > session required pam_env.so user_readenv=1 envfile=/etc/default/locale
 >
 > i'm guessing from the comment that user_readenv=1 is in place
 > primarily to allow overrides of the default locale?

Indeed. Removing "user_readenv=1" from that line fixes the warning.

 > etch was
 > quite some time ago, possibly preceding support for SendEnv?
 > that seems sufficient workaround if user_readenv is deprecated,
 > but this is all speculative.

The comment for etch is about "envfile=/etc/default/locale" which is 
read regardless of the user_readenv setting. See the man page for pam_env.

Kind regards,

Richard van den Berg