Bug#278394: PAM not run in single address space

[Sam Hartman <hartmans@debian.org>]

Hi.

I just wanted to let you know that I have done an audit of the thread
code in auth-pam.c.

This is the simplest use of threads I've ever seen outside of a
classroom exercise.

The authentication thread is self contained and I don't see how it
could manage to escape into other parts of the program.  Similarly,
the process managed is significantly simplified in the threads case
compared to the non-threads case.


Short of a libc bug or a misbehaving PAM module I would be surprised
if this code introduces any problems.