On 08/12/2018 04:58 PM, Andreas Henriksson wrote: > Hello again, > > My previous mail didn't result in any feedback, so let me try again > with some more detailed questions that might be easier to discuss > related to the PAM configuration of su (and su-l). > FWIW I'm not sure -devel is very likely to be read by the people who'd have useful input for you, you may want to reach out to a more narrow list or group of people instead.
For what it's worth, I don't think pam_xauth is a good idea in the su pam config. (I don't think copying DISPLAY and XAUTHORITY was, either.) Cheers, Julien