Nicolas Williams <Nicolas.Williams at Sun.COM> wrote: > > For instance, in the X consolidation code, we are reading only > > /etc/default/login, and it would make much more sense to have > > PAM read this (or a replacement) itself. In xdm, we check for > > the CONSOLE line to determine whether or not to let root login. > > PAM should be able to do this, perhaps with a "restrict_root_to_console" > > module or something like that. > > Most, but not all things in /etc/default/login can be moved into PAM > modules, yes (and lastlog processing, and, if we add PAM items, even > utmpx processing could move into PAM). E.g., TIMEOUT cannot be > implemented in PAM without extending PAM (LinuxPAM, IIRC, implements > timeouts in PAM). > > There are other things in /etc/default/ though. cscope finds 105 calls > to defopen() in ON alone (excluding closed source, where there's a few > more). Yes, a few over half of those are defopen(NULL) calls.
Please note that my programs (star, rmt, rscsi, cdrecord, readcd, cdda2wav, mkisofs) also use /etc/default/ via my libdeflt. As I am using this as a portabl way (libdeflt is included in source in the related tools), this will stay as is. J?rg -- EMail:joerg at schily.isdn.cs.tu-berlin.de (home) J?rg Schilling D-13353 Berlin js at cs.tu-berlin.de (uni) schilling at fokus.fraunhofer.de (work) Blog: http://schily.blogspot.com/ URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily