On Fri, 2011-06-10 at 16:36 +0200, Thorsten Kukuk wrote:
Hi,
what should we do with this ticket?
https://fedorahosted.org/linux-pam/ticket/1
It is about that pam_securetty should always allow root login from
devices listed in /sys/class/tty/console/active.
I think the reason for this patch (ttyS0 missing in /etc/securetty
on s390x) is wrong, if I build a distribution, I have to add the
device there.
You're right, that it could be done by other means in a distribution
however it would also mean that the /etc/securetty would differ on
various arches or it has to be dynamically updated as before. Having
pam_securetty autodetect it seems much more elegant to me.
But we have already the console= option, and this is equivalent
to it.
Yes.
Patch looks ok to me, but I couldn't test it, since my machines
don't
have a new enough kernel.
I tested it on a recent kernel and it seems to work fine. I can commit
it if you agree.
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb