> > > REGISTER .* EXECUTE /sbin/pam_console_apply $devpath > > used to be there. Too slow. > No. What was there was REGISTER .* EXECUTE /sbin/pam_console_apply That runs pam_console_applies for *all* devices every time. I suggest extending pam_console_apply to run for a single specific file. It should not be slower than loading module :-) > > > > We do not need to do anything on unregistered. > > > > What I do *not* like, is that this triggers CHANGE action additionally. > > But that's another problem ... > > IMO it's a bug. I've not had a look yet.
