2007-01-08 22:45:10 +01:00
|
|
|
===========================================================================
|
2008-04-08 11:36:23 +02:00
|
|
|
$NetBSD: MESSAGE,v 1.2 2008/04/08 09:36:23 gson Exp $
|
2007-01-08 22:45:10 +01:00
|
|
|
|
2008-04-08 11:36:23 +02:00
|
|
|
If xscreensaver is built with the "pam" option:
|
2007-01-08 22:45:10 +01:00
|
|
|
In order to make unlocking work , you need to add an
|
|
|
|
|
xscreensaver file to your pam configuration directory (usually
|
|
|
|
|
/etc/pam.d). You can find a sample file in:
|
|
|
|
|
${EGDIR}/pam.d/xscreensaver-NetBSD
|
|
|
|
|
On NetBSD, the "pam_pwauth_suid.so" module can be used to authenticate
|
|
|
|
|
against a shadow password database. Note that use of this module might
|
|
|
|
|
allow programs with your privileges to get a copy of your plaintext
|
|
|
|
|
password as typed in for unlocking.
|
|
|
|
|
Alternatively, you might set the
|
|
|
|
|
${PREFIX}/bin/xscreensaver
|
|
|
|
|
executable setuid root. Since this is a relatively complex program,
|
|
|
|
|
there is the risk of other exploits.
|
|
|
|
|
===========================================================================
|
