Place to call pam_loginuid in the pam session stack

Laurent Bigonville bigon at debian.org
Tue Apr 22 17:30:44 UTC 2014


Hello,

This is maybe a dumb question, but is there any preferred place in the
pam session stack to call pam_loginuid?

Is it preferable to call it just after "pam_selinux close" or is any
place OK? I guess the sooner the better so the needed information are
present to audit what the other pam modules are doing?

Cheers,

Laurent Bigonville




More information about the Linux-audit mailing list