Re: State of debianutils
On Thu, Jan 31, 2002 at 12:00:57PM +0100, Wichert Akkerman wrote:
> Previously Matt Zimmerman wrote:
> > Personally, I think that this functionality belongs in /bin/su. I started
> > work on a patch to do it, but quit working on it when I found that xauth's
> > interface made it overcomplicated to do securely (I wanted to call out to
> > xauth because /bin/su shouldn't link with any X libraries, IMO).
>
> Iirc there is already a PAM module somewhere that will do this, which
> is also a much better approach then modifying su itself.
As I recall, the last time this came up here, several people pointed out
that there was something fundamentally wrong with the PAM xauth module that
made it a poor approach. I don't remember the details, though.
--
- mdz
Reply to: