shadow installs login.defs(5) which documents the parameter ENV_SUPATH . Shadow also installs the 'su' program, which in the mentioned version at least, uses ENV_SUPATH. pam-login, uses ENV_ROOTPATH, which is not described in the login.defs man page, and not understood by su. I believe it is a gratuitous change, which was not believed to break backward compat. http://sdb.suse.de/en/sdb/html/kukuk_pam.html claims: The entry ENV_SUPATH is omitted, as it has never been used. There is a new entry, ENV_ROOTPATH. This contains the default path for the user root. Otherwise all valid variables for /etc/login.defs are described in the manpage (man login.defs). Which obviously isnt true... The solution is a simple sed in the ebuild to alter the affected line in login.c or su.c -- choose one and go with it. Then use that one in /etc/logins.def --- unfortunately, login complains if it sees ENV_SUPATH in there, but if it isnt, su doesnt work as advertized. Paul
pam-login-3.6-r2 should fix this.
