On 10/08/08 00:13, Nicolas Williams wrote: > On Wed, Oct 08, 2008 at 12:08:38AM +0200, Bart Blanquart wrote: >>> Because you'd not ever have to change any PAM config to set that. >> I think I'm missing something here: "take a module argument naming >> the suffix of a policy.conf variable" means that the module gets an >> argument, which is specified in a pam.conf snippet somewhere. > > That suffix would never, ever have to change.
So what's the difference with pointing to a profile name that would never have to change, which removes one level of indirection? Bart
