[arch-general] pam settings INSECURE

bender02 bender02 at archlinux.us
Wed Nov 18 06:58:46 EST 2009


2009/11/18 Ng Oon-Ee <ngoonee at gmail.com>:
> The *disadvantage* is that the devs/maintainers have to patch up-stream.
> This should be kept to a minimum, primarily to reduce their workload,
> and also because it is ASSUMED that if you use Arch, you're capable of
> doing the Right Thing (tm) according to your situation, or at least
> finding out how to.

If you would take the time to look at the packages that are involved
in this (namely shadow and kdebase-workspace), you'd see that both
/etc/pam.d/login and /etc/pam.d/kde are manually suplied alongside the
PKGBUILDs. So in this case, it's not "patching" but straight
"replacing" the "upstream".


More information about the arch-general mailing list