>>>>> "Andrew" == Andrew Morgan <morgan@xxxxxxxxxxxxx> writes:
Andrew> The error status for the setcred sequence is treated as if
Andrew> the module was listed 'cred required ...'. That is, the
Andrew> chain will execute everything and fail if one of the
Andrew> modules returns an error.
Yes. And my point is that this seems like a bogus design decision in
the case of a skip/jump action.
Again, I reask my question: in the case of a jump action, why do you
want to treat the module as required. When is this ever the behavior
users want?
In the absence of a compelling justification, I will change the
behavior.
_______________________________________________
Pam-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/pam-list
