On Wed, Oct 08, 2008 at 02:13:58PM +0200, Bart Blanquart wrote: > On 10/08/08 00:13, Nicolas Williams wrote: > > On Wed, Oct 08, 2008 at 12:08:38AM +0200, Bart Blanquart wrote: > >>> Because you'd not ever have to change any PAM config to set that. > >> I think I'm missing something here: "take a module argument naming > >> the suffix of a policy.conf variable" means that the module gets an > >> argument, which is specified in a pam.conf snippet somewhere. > > > > That suffix would never, ever have to change. > > So what's the difference with pointing to a profile name that would > never have to change, which removes one level of indirection?
Oh, perhaps I missed that the profile name was meant to never change.
