Re: Propagating DISPLAY and XAUTHORITY in su when using PAM

On Tue, 30 Aug 2005, J. Scott Berg wrote:

> Maybe I'm not understanding how to use PAM properly, but shouldn't su 
> propagate DISPLAY and XAUTHORITY when USE_PAM is defined, so that pam_xauth 
> works?  Right now, they're only propagated when USE_PAM is not defined.  My 
> fix (which does the right thing for me) attached.

Sorry but I must reject this patch.

Why ?

Because propagate DISPLAY and XAUTHORITY enviroment variables now
works correctly if you are use correctly pam_xauth and pam_env modules.

You must only uncomment in /etc/security/pam_env.conf line with:

# Set the DISPLAY variable if it seems reasonable
DISPLAY         DEFAULT=${REMOTEHOST}:0.0 OVERRIDE=${DISPLAY}

Summarize: usualy used GNU su patch with PAM support which have propagete 
DISPLAY and XAUTHORITY variables if PAM is enabled is incorrect because 
it dissallow X forwarding to su session by change configuration only on 
PAM level.

kloczek
-- 
-----------------------------------------------------------
*Ludzie nie majÂą problemĂłw, tylko sobie sami je stwarzajÂą*
-----------------------------------------------------------
Tomasz KÂłoczko, sys adm @zie.pg.gda.pl|*e-mail: [email protected]*