PAM touching shadow?

[Tobias Schaefer]

Hi Eric,

> Precisely; however it is trying to open /etc/shadow *as the logged-in
> user*, not root.  This is what's throwing the errors in the audit log.

it seems that you have to either install xscreensaver as setuid root or
use some other pam module that uses a daemon (running as root) to do the
lookups. (Sorry, I don't know a module that works like this.)


Tobias
-- 

  Tobias Schaefer				Phone	07071-9457-406
  science + computing ag			FAX	07071-9457-411
  Hagellocher Weg 71-75
  D-72070 Tuebingen     Email: T.Schaefer at science-computing.de
        WWW:  http://www.science-computing.de/