Bug#31150: PAM under svgalib programs

[Ben Collins <bmc@visi.net>]

After reading this over and looking at the PAM modules, I have found
that indeed it is possible to use svgalib applications with PAM, just
the same that you can use PAM with non-setuid root applications that
need password verification (for example, setting xlock -s and enabling
pam support is possible).

The mechanism is the pam_pwdb module which uses libpwdb and a single
setuid root binary. The calling program does not need to have any
special priviledges since the module calls the setuid pwdb_chkpwd
program, which only compares the the password of the user invoking it.

Please consider this, and close the report if you feel it satisfies the
problem.

--
-----    -- - -------- --------- ----  -------  -----  - - ---   --------
Ben Collins <b.m.collins@larc.nasa.gov>                  Debian GNU/Linux
UnixGroup Admin - Jordan Systems Inc.                 bcollins@debian.org
------ -- ----- - - -------   ------- -- The Choice of the GNU Generation