Bug 3954

Summary: PAM-ified 'su' does not support pam_putenv()
Product: [Retired] Red Hat Linux Reporter: wingc
Component: sh-utilsAssignee: Cristian Gafton <gafton>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: high Docs Contact:
Priority: medium    
Version: 6.0   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://www.engin.umich.edu/caen/systems/Linux/code/patches/sh-utils-1.16-morepam.patch
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 1999-07-29 01:33:13 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description wingc 1999-07-09 00:56:25 UTC 
The PAM patch to 'su' does not support pam_putenv(). Some
PAM modules expect to be able to set environment variables
in the child process. A prime example is Kerberos PAM
modules, which want to set the KRBTKFILE environment
variables both for security reasons and to allow a single
user to have multiple 'Kerberos sessions' each with
different ticket files.

Here is a patch that enables this functionality; please
apply it or something like it to the next version of Red
Hat:

http://www.engin.umich.edu/caen/systems/Linux/code/patches/sh-utils-1.16-morepam.patch


Thank you very much,

Chris Wing
wingc.edu
Comment 1 Cristian Gafton 1999-07-29 01:33:59 UTC 
Fixed in sh-utils-1.16-24 and later.

Thanks,