[PATCH] PAM Support for Busybox Login

Thaddeus Ternes tternes at gmail.com
Mon Oct 2 20:15:17 UTC 2006


This is actually exactly what I'm doing.  Right now, I use a single
pam module at a time.  I need a few modules available, depending on
how the system's configuration changes, but having all-out pam is a
bit much.  Some kind of tinypam is something I would definitely be
interested in.

-Thaddeus

On 10/1/06, Rich Felker <dalias at aerifal.cx> wrote:
> On Sun, Oct 01, 2006 at 08:58:50AM -0500, Jason Schoon wrote:
> > On 10/1/06, Bernhard Fischer <rep.nop at aon.at> wrote:
> > >
> > >
> > >I'd say that CONFIG_PAM falls under the same category as LFS and
> > >LOCALE support, so i would rather put it into the 'Build Options'
> > >submenu than creating a separate CONFIG_DESKTOP. Just a thought.
> >
> > As would I, considering I know that Thaddeus just added this for use in an
> > embedded system ;-)  There are times where Busybox login just doesn't cut it
> > (using RADIUS for authentication as an example).
>
> IMO PAM isn't just for bloated systems. The default implementation is,
> but it's very easy to create a dropin replacement for libpam that
> behaves the same but implements just the one authentication method
> that the system needs. Then it can be tiny, static linked, etc. :) I'm
> planning on putting together such a fake libpam for my own use at some
> point because it's easier than hacking custom auth into each app, but
> smaller and more secure than trusting all that dynamic loading stuff.
>
> Rich
>
> _______________________________________________
> busybox mailing list
> busybox at busybox.net
> http://busybox.net/cgi-bin/mailman/listinfo/busybox
>



More information about the busybox mailing list