From: dickey@invisible-island.net   
      
   On Wed, Feb 11, 2026 at 04:54:19AM +0100, Vincent Lefevre wrote:   
   > On 2026-02-10 19:21:06 -0500, Thomas Dickey wrote:   
   > > On Wed, Feb 11, 2026 at 01:13:05AM +0100, Vincent Lefevre wrote:   
   > > > I don't know how this works, but I'm wondering why you mentioned   
   > > > authentication. The only thing that should be used concerning the   
   > > > user is the PID of the process.   
   > >    
   > > man pam:   
   > >    
   > >        pam - Pluggable Authentication Modules Library   
   > >    
   > > ...   
   > >    
   > > DESCRIPTION   
   > >        PAM is a system of libraries that handle the authentication tasks of   
   > >        applications (services) on the system. The library provides a stable   
   > >        general interface (Application Programming Interface - API) that   
   > >        privilege granting programs (such as login(1) and su(1)) defer to to   
   > >        perform standard authentication tasks.   
   > >    
   > > I'd suppose PAM wants more than a process-id,   
   > > and am asking how you suppose that could be accomplished.   
   >    
   > I would have thought that there may be contexts where authentication   
   > is not needed (e.g. because the user has already authentified   
   > themselves at a higher level). But I really don't know how PAM works.   
      
   Barring problems that you might read about on oss-security, there's no   
   way that PAM is going to provide a way to bypass the permissions needed   
   to update systemd's replacement for wtmp.   
      
   --    
   Thomas E. Dickey    
   https://invisible-island.net   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQGzBAABCgAdFiEEGYgtkt2kxADCLA1WzCr0RyFnvgMFAmmMSbEACgkQzCr0RyFn   
   vgNO0Qv/X35x4mGIerkMGeJKios2jsa8vNxYT8LQAFUzkUGjxTsEiRHmVezBqnF8   
   7vY+rbjG3fVWS4qgwR1piW1kTul8+Anr3eh7xpMoeV0/slTbHLMqnrE1VE5Inos5   
   u01eEZMqQub/BxLAXAjhklfg4o43nX7E/Q2/JQxZ0nceI9YNxVRu++/qQU3asUxB   
   8+Nt2Y2rxIYAC1AUKg+W+2liNpk2BQeQ/hOYpTp9RQ+Q59E5gV5+n2zYGBXIwoB5   
   PTnGy3Bc/MQEbtuq9q+vwOjsgQy9ZU9nQ/Uw4SLz2eg5qNCRvUCfABn464c7GejU   
   O0ChVB8je3gp0ZvhN1NHSwKBD3Hr05vP4oXWbaoiHCX3nN6NEUvy3rt/ZMHn721x   
   yhN4DMxHFARL7C5+bAZeajCjzVNFPgv+7E1UKJ7GSlsRrQdCb2M5E8vcUxFeW151   
   ccDK9x2CpnZ1zmDVUE4W49kd/Zki1iHdBBhB6E2j1n2+BlEkCG4msl22UmdQT3Er   
   6jAOsAVY   
   =A6Ol   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)