[pkg-fso-maint] Upload to main?

Joachim Breitner nomeata at debian.org
Fri Oct 3 22:38:30 UTC 2008


Hi,

Am Freitag, den 03.10.2008, 18:09 +0200 schrieb Luca Capello:
> On Fri, 03 Oct 2008 17:08:24 +0200, Joachim Breitner wrote:
> > Am Freitag, den 03.10.2008, 13:04 +0200 schrieb Luca Capello:
> >> Would you like to manage that or do you prefer Python coding?  :-D
> >
> > I think I’ll do it soon. I’d like to write a small C helper for proper
> > PAM interaction, though, otherwise it would be almost trivial, based on
> > zhone-session.
> 
> I haven't checked yet, but are we sure that `su -l` doesn't already do
> anything we need?  The advantage of shell scripts is that they don't
> need to be compiled at all and they are easily customizable.

Using “su -l” means that the PAM session configuration for su and for
nodm would have to be equal, which is not always desirable (consider
auto-mounting something), and which I’d really like to avoid for
something that’s less a hack than zhone-session.

I’m pondering about providing a general pam-helper binary that could be
used by others as well (e.g. FreeNX is abusing ssh or su for a similar
reason), but there are some security problems with a general binary
(i.e. one that let’s you specify the session type).

Greetings,
Joachim
-- 
Joachim "nomeata" Breitner
Debian Developer
  nomeata at debian.org | ICQ# 74513189 | GPG-Keyid: 4743206C
  JID: nomeata at joachim-breitner.de | http://people.debian.org/~nomeata
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : http://lists.alioth.debian.org/pipermail/pkg-fso-maint/attachments/20081004/90252d97/attachment.pgp 


More information about the pkg-fso-maint mailing list