Re: auth-pam: don't leak PAM env strings after pam_putenv()
"Theo de Raadt" <[email protected]> Mon, 18 May 2026 18:46:04 -0600
| Newsgroups | gmane.network.openssh.devel |
|---|---|
| Message-ID | <[email protected]> |
Simon Josefsson via openssh-unix-dev <[email protected]> wrote: > > AIX PAM is also closed. IBM's pam_putenv(3) documentation > > (ibm.com/docs/en/aix/7.3.0?topic=p-pam-putenv-subroutine) > > describes behaviour but does not commit on ownership semantics. Is there anyone from IBM on the list who find someone internal who can give an answer? Anyways, it is starting to look like the original proposed diff will be good. Thank you for doing the research.