Re: gdm: shadow unfriendly

[Dave Boynton <dboynton worldnet att net>]

Martin Kasper Petersen wrote:
> >> 1. In order to support shadow passwords, I have to change gdm.conf
> >>    to read nobodyuser=root, as only root can access the /etc/shadow
> >>    file, even via pam.
> 
> And the greeter program which makes use of more library calls runs as
> nobody for security reasons.
> 

Yes, I agree with the concept, but unfortunately, you can't access
/etc/shadow as nobody, without some help from setuid. Even with pam.

Dave