On Wed, Oct 08, 2008 at 12:08:38AM +0200, Bart Blanquart wrote: > > Because you'd not ever have to change any PAM config to set that. > > I think I'm missing something here: "take a module argument naming > the suffix of a policy.conf variable" means that the module gets an > argument, which is specified in a pam.conf snippet somewhere.
That suffix would never, ever have to change.