On 8/12/2010, at 6:29am, Alan McKinnon wrote: >> I'm usually slow at updating my gentoo machine, and I think I was >> behind by about a month from last update. Anyways, I noticed that the >> recent pambase-20101024 has pam_permit optional on for auth, account >> and password in /etc/pam.d/system-auth. >> >> That didn't sound real neat, so Iooked it up in the manual and it says >> "very dangerous, use with extreme caution." > ... > > The pam maintainer usually blogs about his changes: > > http://blog.flameeyes.eu
I read a little because I was interested. To be more specific, this entry mentions pam_permit: http://blog.flameeyes.eu/2010/10/24/new-pambase-choices This entry seems to suggest that Portage makes automated /etc configurations problematic: http://blog.flameeyes.eu/2010/04/29/pambase-is-not-that-free Stroller