why does redhat not make ksu setuid root?

Elliot Lee sopwith at redhat.com
Mon Jul 22 19:37:11 EDT 2002


On 22 Jul 2002 bbense+comp.protocols.kerberos.Jul.22.02 at telemark.stanford.edu wrote:

> - ksu does a lot more than su, you can use it as replacement for
>   sudo if you are sufficiently motivated. I'm not sure PAM is
>   sufficiently flexible enough to support these added features.
>   ( Basically, you need to pass argc,argv down to the pam
>   routine. )

sudo appears to have PAM support (allowing use of this hypothetical
pam_k5users module), and I'm not sure it needs replacing :)

-- Elliot
Don't worry about people stealing an idea. If it's original, you will have 
to ram it down their throats. -HA




More information about the Kerberos mailing list