[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: PAM use by non root applications



On Wed, 04 Sep 2002 19:33:25 -0500
Hanasaki JiJi <hanasaki@hanaden.com> wrote:

> Does Woody allow non-root id applications to to PAM auth?
> 

No, I don't think so. At least I think it will not allow for auth
against files that need root read permissions (or any other you don't
have for that matter). So if you're using shadow passwords you're   
authenticating against /etc/shadow for which you need:
-rw-r-----    1 root     shadow        741 Jul 24 16:49 /etc/shadow
So only if the authenticating process  has egid shadow or euid root
it'll work.

Hope that helps,

Tim



Reply to: