Re: Login PAM interaction suspect
David Mitton <[email protected]>
| Newsgroups | gmane.linux.pam |
|---|---|
| Message-ID | <[email protected]> |
Quoting Nicolas François <[email protected]>: > Hello, > > On Wed, Nov 16, 2011 at 10:38:55AM -0500, David Mitton wrote: >> >> This was discussed in some other forum (which I lost my breadcrumbs to). >> It's moot to me, as I currently don't plan on changing that value. >> But login should not assume that getpwnam(PAM_USER) will work until >> committed with a setcred. > > OK. I see your point and getpwnam() should be delayed as much as possible. > > However, login is required to setuid(<UID>) / setgid(<GID>) before > setcred, and <UID> or <GID> can only be found using getpwnam(PAM_USER). Why would that be? and where is it written? Thanks > > Best Regards, > -- > Nekral > > _______________________________________________ > Pam-list mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/pam-list >