Hello,

After a long time I just revisited my bug report for libpam-unix2 and
the following discussion.

> If you'd like to help, please run the changes by the current PAM
> policy  maintainer Sam Hartman <[EMAIL PROTECTED]>, and also
> upstream, Thorsten Kukuk <[EMAIL PROTECTED]> - I'm curious if SuSE has
> this bug with pam_unix2 also and if they solved it differently?

I just sent the changes to Sam Hartman _ I hope that he is still the PAM
policy maintainer.

SuSE does not have this problem with pam_unix2 as all mentioned
screensaver programs (with exception of xscreensaver) are setuid root.
For xscreensaver, setuid root does not help, so SuSE uses a hack so that
xscreensaver calls the helper binary unix2_chkpwd.

In Debian, the screensaver programs are not setuid root, because  the
normal authentication module pam_unix uses a helper binary unix_chkpwd
that is setuid root.

Christoph


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to