mirrors/linux-pam
0
0
Fork 0
mirror of https://github.com/linux-pam/linux-pam.git synced 2024-11-23 17:53:40 +08:00
Code Issues Packages Projects Releases Wiki Activity

pam_env: document when the module is executed

Browse Source 
Document that pam_env.so is only called by pam_setcred() and
not by pam_authenticate() when added to the auth stack.

Resolves: https://github.com/linux-pam/linux-pam/issues/680
Signed-off-by: Thorsten Kukuk <kukuk@suse.com>
This commit is contained in:
Thorsten Kukuk 2024-03-27 11:25:37 +01:00 committed by Dmitry V. Levin
parent 140b407ed4
commit 78e3988dd3
1 changed files with 19 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
modules/pam_env/pam_env.8.xml
View File

@ -114,6 +114,19 @@
Since setting of PAM environment variables can have side effects
to other modules, this module should be the last one on the stack.
</para>
<para>
This module is only executed if the main application calls
<citerefentry>
<refentrytitle>pam_setcred</refentrytitle><manvolnum>3</manvolnum>
</citerefentry> or
<citerefentry>
<refentrytitle>pam_open_session</refentrytitle><manvolnum>3</manvolnum>
</citerefentry>.
The module does nothing and returns <emphasis>PAM_IGNORE</emphasis> if called by
<citerefentry>
<refentrytitle>pam_authenticate</refentrytitle><manvolnum>3</manvolnum>
</citerefentry>.
</para>
</refsect1>
<refsect1 xml:id="pam_env-options">
@ -244,7 +257,11 @@
<term>PAM_IGNORE</term>
<listitem>
<para>
No pam_env.conf and environment file was found.
No pam_env.conf and environment file was found or the module got
called by
<citerefentry>
<refentrytitle>pam_authenticate</refentrytitle><manvolnum>3</manvolnum>
</citerefentry>.
</para>
</listitem>
</varlistentry>
@ -309,4 +326,4 @@
pam_env was written by Dave Kinchlea &lt;kinch@kinch.ark.com&gt;.
</para>
</refsect1>
</refentry>
</refentry>