XOrg-test and PAM
Nick Hudson
nhudson at lunar-linux.org
Thu Oct 7 16:06:54 UTC 2004
Well then, why dont we just take out the PAM support if pam_permit.so
aloows anyone to login, kind of like bineg without PAM to beigin with.
I will do some testing over the weekend on this issue and see what I can
come up with. I am also still working on the fontconfig issue with
XOrg, looks like we have to use the fontconfig module because if you
dont use it and install the fontconfig from Xorg it doesnt install
/usr/X11R6/lib/libfontconfig.la, which is needed. So once the
fontconfig issues are solved I will move XOrg-test over to XOrg and out
of zbeta.
Nick
Auke Kok wrote:
> Niki Guldbrand wrote:
>
>> Hi Jasper.
>>
>> Thanks for the help, ran into this too... :-/
>>
>> On Tue, 2004-10-05 at 21:06 +0200, Jasper Huijsmans wrote:
>>
>>
>>> Hey,
>>>
>>> I just successfully installed XOrg-test. Nice work Nick, 6.8.0
>>> didn't work, but 6.8.1 compiled fine.
>>>
>>> Then I found that I couldn't start X unless I was root.
>>>
>>> After some googling I found a solution: add file /etc/pam.d/xserver
>>> with these lines:
>>>
>>> auth required pam_permit.so
>>> account required pam_permit.so
>>>
>>> No idea about the security implications.
>>>
> /usr/src/Linux-PAM-0.77/modules/pam_permit # cat README
> # $Id: README,v 1.1.1.1 2000/06/20 22:11:46 agmorgan Exp $
> #
>
> this module always returns PAM_SUCCESS, it ignores all options.
>
> given the fact that auth=required and account=required I think it
> permits xserver to be started for all properly logged in users. The
> impact of that should not be high, as it will be the same as running
> XOrg on a machine without PAM. (right?)
>
> sofar
>
> _______________________________________________
> Lunar-dev mailing list
> Lunar-dev at lunar-linux.org
> http://lunar-linux.org/mailman/listinfo/lunar-dev
More information about the Lunar-dev
mailing list