On 11/24/08 14:08, Mayuresh Nirhali wrote: > From what I understood in the discussion so far, dante, the way it is > implemented today, should not be integrated for atleast to 2 reasons, > 1. PAM requires UID=0, and in turn gains all the privileges (more > than necessary for certain operations) > 2. It does not seem to confirm to the Solaris PAM policy, as rightly > pointed out by Joep.
I think 1) is "Just The Way It Is". It won't win a beauty contest, but it won't keep you from integrating either. I'm happy to work with you to resolve 2) in a patch to the upstream bits that can be integrated in the SFW consolidation. Joep -- just adding some "chatter"