Comment 3 for bug 1302349

Revision history for this message
Marko Kohtala (marko-kohtala) wrote :

Than you for the thanks. I think we should figure this thing out properly before creating a lot of tasks. Simple grep pam_env /etc/pam.d/* reveals some packages, but not all. Is there a database which packages provide which files?

I think that instead of what I proposed first, it would be better to have these two lines:

auth required pam_env.so user_readenv=0
auth required pam_env.so conffile=/dev/null envfile=/etc/default/locale

Then the order of reading files would be

/etc/security/pam_env.conf
/etc/environment
/etc/default/locale
~/.pam_environment

What I first proposed would read the /etc/default/locale after ~/.pam_environment not allowing user to override the locale.

I tried to submit for linux-PAM an update on pam_env documentation. Lets see how active they are. Better documentation should help here.