pam_filter.so doesn't work with login(1) because * pam_filter.so sets stdin of the application to a slave pseudo-terminal * login(1) checks if stdin is the same as the user's tty If you use pam_filter.so in login(1), it will reject every login. I don't know if it is a bug --- maybe a wishlist bug of libpam-modules (document its potential danger)?
-- Oohara Yuuma <[EMAIL PROTECTED]> Graduate-school of Science, Kyoto University PGP key (key ID F464A695) http://www.interq.or.jp/libra/oohara/pub-key.txt Key fingerprint = 6142 8D07 9C5B 159B C170 1F4A 40D6 F42E F464 A695 I always put away what I take. --- Ryuji Akai, "Star away"