[Pkg-shadow-devel] pam_env should be a session module

[Christian Perrier]

Quoting Nicolas François (nicolas.francois at centraliens.net):
> Hello,
> 
> See the attached discussion on #debian-devel.
> 
> Currently, when root uses su, pam_env is not used (because pam_env is used
> as an auth module, and pam_rootok is defined as sufficient earlier)
> 
> I think we should use pam_env as a session module (as upstream do).
> 
> Another solution would be to move the pam_env line before sufficient
> pam_rootok.


According to assufield's nice comments in the discussion, that seems
to be a bad idea.

Andrew makes very rude comments but is often right because he has some
good expertise (I expect him to grow up a little some day in a far
future...:-)))

So, let's move pam_env to a session module.