Re: [systemd-devel] PAM stack of run0

[Andrei Borzenkov]

24.01.2026 19:00, Thorsten Kukuk wrote:
Calling pam_env.so from the auth stack is a security problem and should
never be done.
Always add it only to the session stack.

systemd services do not use auth anyway, they only go via account and 
session.