README.md
1This directory contains a port of the SimplePAMApp su to more
2aggressively use libcap.
3
4The Makefile builds a binary called `su` that registers with PAM as
5the application `sucap`. We've provided a sample `/etc/pam.d/sucap`
6file in this directory named `sucap.pamconfig`.
7
8The point of developing this is to better test the full libcap
9implementation, and to also provide a non-setuid-root worked example
10for testing PAM interaction with libcap and pam_cap.so. The
11expectations for `pam_unix.so` are that it includes this commit:
12
13
14The original sources were found here:
15
16https://kernel.org/pub/linux/libs/pam/pre/applications/SimplePAMApps-0.60.tar.gz
17
18The SimplePAMApps contain the same License as libcap (they were
19originally started by the same authors!). The credited Authors in the
20above tarball were:
21
22- Andrew [G.] Morgan
23- Andrey V. Savochkin
24- Alexei V. Galatenko
25
26The code in this present directory is freely adapted from the above
27tar ball and is thus a derived work from that.
28
29**NOTE** As of the time of writing, this adaptation is likely rife
30 with bugs.
31
32Finally, Andrew would like to apologize to Andrey for removing all of
33the config support he worked to add all those decades ago..! I just
34wanted to make a quick tester for a potential workaround for this
35pam_cap issue:
36
37- https://bugzilla.kernel.org/show_bug.cgi?id=212945
38
39Andrew G. Morgan <morgan@kernel.org>
402021-06-30
41