Re: Move auth_approval in su.c before fork is lost due to pledge?

[Todd C. Miller]

One change with this diff is that the approval script will run as
the invoking user, not the target user.  I'm not sure that really
makes a difference though.

 - todd