Re: auth-pam: don't leak PAM env strings after pam_putenv()

"Theo de Raadt" <[email protected]> Mon, 18 May 2026 18:46:04 -0600
Newsgroups gmane.network.openssh.devel
Message-ID <[email protected]>
Simon Josefsson via openssh-unix-dev <[email protected]> wrote:

> > AIX PAM is also closed. IBM's pam_putenv(3) documentation
> > (ibm.com/docs/en/aix/7.3.0?topic=p-pam-putenv-subroutine)
> > describes behaviour but does not commit on ownership semantics.

Is there anyone from IBM on the list who find someone internal
who can give an answer?

Anyways, it is starting to look like the original proposed diff will be
good.  Thank you for doing the research.