[PATCH] PAM Support for Busybox Login

[Rich Felker]

On Sun, Oct 01, 2006 at 08:58:50AM -0500, Jason Schoon wrote:
> On 10/1/06, Bernhard Fischer <rep.nop at aon.at> wrote:
> >
> >
> >I'd say that CONFIG_PAM falls under the same category as LFS and
> >LOCALE support, so i would rather put it into the 'Build Options'
> >submenu than creating a separate CONFIG_DESKTOP. Just a thought.
> 
> As would I, considering I know that Thaddeus just added this for use in an
> embedded system ;-)  There are times where Busybox login just doesn't cut it
> (using RADIUS for authentication as an example).

IMO PAM isn't just for bloated systems. The default implementation is,
but it's very easy to create a dropin replacement for libpam that
behaves the same but implements just the one authentication method
that the system needs. Then it can be tiny, static linked, etc. :) I'm
planning on putting together such a fake libpam for my own use at some
point because it's easier than hacking custom auth into each app, but
smaller and more secure than trusting all that dynamic loading stuff.

Rich