--3FyYKcuUbgqNYeqV Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Tue, Jun 25, 2002 at 04:32:21PM -0400, Robert P. J. Day wrote: > can anyone explain the rationale behind the "pam_permit" > lines in, for instance, the /etc/pam.d/up2date file in red hat > 7.3? > #%PAM-1.0 > auth sufficient /lib/security/pam_rootok.so > auth required /lib/security/pam_stack.so service=system-auth > session required /lib/security/pam_permit.so > session optional /lib/security/pam_xauth.so > account required /lib/security/pam_permit.so > as i understand it, pam_permit.so always returns success, so what > does it add to this file? It ensures that a failure in pam_xauth doesn't cause the session to abort. Steve Langasek postmodern programmer --3FyYKcuUbgqNYeqV Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE9GNZrKN6ufymYLloRAivaAJ4pJeZjfLPqec7nS2JDwDvxk47Z3ACfZOM/ CXaotrXHjQAeYM21ZcCYYro= =fwV4 -----END PGP SIGNATURE----- --3FyYKcuUbgqNYeqV--