Re: HELP WANTED: security review / pam experts for su transition
On 08/12/2018 04:58 PM, Andreas Henriksson wrote:
> Hello again,
>
> My previous mail didn't result in any feedback, so let me try again
> with some more detailed questions that might be easier to discuss
> related to the PAM configuration of su (and su-l).
>
FWIW I'm not sure -devel is very likely to be read by the people who'd
have useful input for you, you may want to reach out to a more narrow
list or group of people instead.
For what it's worth, I don't think pam_xauth is a good idea in the su
pam config. (I don't think copying DISPLAY and XAUTHORITY was, either.)
Cheers,
Julien
Reply to: