After reading this over and looking at the PAM modules, I have found that indeed it is possible to use svgalib applications with PAM, just the same that you can use PAM with non-setuid root applications that need password verification (for example, setting xlock -s and enabling pam support is possible).
The mechanism is the pam_pwdb module which uses libpwdb and a single setuid root binary. The calling program does not need to have any special priviledges since the module calls the setuid pwdb_chkpwd program, which only compares the the password of the user invoking it. Please consider this, and close the report if you feel it satisfies the problem. -- ----- -- - -------- --------- ---- ------- ----- - - --- -------- Ben Collins <[EMAIL PROTECTED]> Debian GNU/Linux UnixGroup Admin - Jordan Systems Inc. [EMAIL PROTECTED] ------ -- ----- - - ------- ------- -- The Choice of the GNU Generation
