Btw, the decision upong ignore return code opposed to bad/die is entirely delegated to the application, and not to pam itself. And here's login/gdm/whatever are behaving that way. Hence why pam_deny is always good to have.
The stack is considered to be 'failed' only if you get a bad or a die, not an ignore. -- pam configuration could use safer defaults https://bugs.launchpad.net/bugs/152912 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
