On Mon, Dec 27, 2021 at 09:26:01AM -0600, Bruce Dubbs wrote:
> In linuxfromscratch, we have been using su from the shadow package because
> the util-linux version requires Linux-PAM. Recently the maintainers of
> shadow have announced that they are deprecating su. Our problem is that
> some of our users prefer to not install PAM.
I had a discussion about it with Serge (in CC), it seems the current
the conclusion is that "for now shadow will have to keep shipping su".
> Is it possible to make the requirement of Linux-PAM optional in the
> util-linux version of su? From a preliminary inspection of the code, it
> looks like only login-utils/su-common.c would need to be modified with some
> #ifdef constructs, but I am not completely comfortable doing that myself.
The problem is not #ifdef, but that you need local reimplementation
for the very basic PAM functionality.
I have suggested creating some minimalistic library with PAM
compatible API, but without all the functionality. Maybe we can
develop this library in util-linux and later offer it to other
projects. Volunteers? ;-)
Another possibility is to improve the original PAM to make it possible
to compile it without modules, etc.
Karel
--
Karel Zak <kzak@xxxxxxxxxx>
http://karelzak.blogspot.com
