[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: State of debianutils

On Thu, Jan 31, 2002 at 12:00:57PM +0100, Wichert Akkerman wrote:

> Previously Matt Zimmerman wrote:
> > Personally, I think that this functionality belongs in /bin/su.  I started
> > work on a patch to do it, but quit working on it when I found that xauth's
> > interface made it overcomplicated to do securely (I wanted to call out to
> > xauth because /bin/su shouldn't link with any X libraries, IMO).
> Iirc there is already a PAM module somewhere that will do this, which
> is also a much better approach then modifying su itself.

As I recall, the last time this came up here, several people pointed out
that there was something fundamentally wrong with the PAM xauth module that
made it a poor approach.  I don't remember the details, though.

 - mdz

Reply to: