3 ms·
See also: PAM, probably a much more enticing target. I wonder if something like the eBPF compiler could be repurposed here, to generate lightweight "binaries"
by tadfisher 5y ago
See also: PAM, probably a much more enticing target.
I wonder if something like the eBPF compiler could be repurposed here, to generate lightweight "binaries" for a configuration that can be linked without needing to dynamically link their own dependencies at runtime.
- LukeShu 5y agoFew programs load PAM modules, essentially all programs load NSS modules.
- dale_glass 5y agoI really hope Poettering decides to fix PAM too. It's well overdue. IMO PAM should be replaced with a daemon. This way all the code that deals with authentication can be isolated into its own process, and my screensaver doesn't need root access to check my password against /etc/shadow. It'll also simplify SELinux settings.