Bug 104274 – reinstate pam_console references in /etc/pam.d/* if pam_console use flag present

• Product: Gentoo Linux
• Status: RESOLVED WONTFIX

[Description splite 2005-08-30 08:33:05 UTC]

Instead of tweaking a bunch of ebuilds to remove all references to pam_console
from /etc/pam.d/*, then forcing the user to add them manually afterward, why not
promote pam_console to a global use flag and let the ebuilds add the references
themselves if the flag is present?

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

[Comment 1 Diego Elio Pettenò (RETIRED) 2005-08-30 12:48:09 UTC]

I'd say because the idea is of removing pam_console entirely with new version 
of sys-libs/pam. 
 

[Comment 2 splite 2005-09-02 11:06:12 UTC]

Is this an upstream decision, or Gentoo's?  Is it going to be replaced with
something equivalent?  (Group-based access control doesn't scale to hundreds of
users sharing hundreds of machines.  Whoever is sitting at the console should
have control of the devices, not someone logged in remotely.)

[Comment 3 Diego Elio Pettenò (RETIRED) 2005-09-02 16:24:51 UTC]

Upstream never supported pam_console (it's a RedHat patch). 
pam_console will probably have its own ebuild for who wants to tinker with it, 
but it's up to them to change their pam.d files. 
It's pointless adding pam_console useflag on other packages, as just login and 
eventually ?dm should use it. 
 
Also, it screw ups pretty badly when used in the wrong way. 
 

[Comment 4 Diego Elio Pettenò (RETIRED) 2005-09-02 16:51:31 UTC]

It's a no-go for now.