About:
pam_script is a PAM that executes a script at the start and end of a session. Any PAM-aware application can use the module to perform arbitrary operations. It was originally written for cleaning up when a user logs out.

Release focus: Major security fixes

Changes:
A bug in the dropping of privileges was fixed. The option parsing code was rewritten and an initgroups option was added.

Author:
Izak Burger [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
(not rated)

Tar/GZ:
http://www.upfrontsystems.co.za/[..]Members/izak/libpam-script_0.1.12.tar.gz

Trove categories: [change]

[Intended Audience]		System Administrators
[License]		OSI Approved :: GNU General Public License (GPL)
[Programming Language]		C
[Topic]		Security

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
Default	0.1.12	03-Jul-2008	GNU General Public License (GPL)

 Releases

Version	Focus	Date
0.1.12	Major security fixes	03-Jul-2008 22:09
0.1.11	Minor feature enhancements	31-Jul-2007 21:39
0.1.10	Minor bugfixes	19-Oct-2006 23:55
0.1.9	Minor feature enhancements	18-Oct-2006 14:17
0.1.8	Minor feature enhancements	03-Aug-2006 07:44
0.1.7	Major bugfixes	17-Jan-2006 08:28
0.1.6	Minor feature enhancements	21-Oct-2005 17:33
0.1.5	Minor feature enhancements	10-Oct-2005 20:26
0.1.4	Minor feature enhancements	17-Aug-2005 22:15
0.1.3	Minor bugfixes	10-Aug-2005 21:05

 Comments

[»] I hacked mine to run both login and logout scripts...
by Aaron Stone - Feb 13th 2003 08:22:18

I hacked my pam_script module to have both a login and a logout script, /etc/security/pam_script/log... respectively. Works wonders for doing screwy things when a user logs in! For example, I use a PHP script that hooks up to my LDAP server to find out where the user's home directory is located and Samba mounts it, doing smart permissions checking along the way. pam_mount wasn't flexible enough, and I have a web based file manager in PHP which does the same thing, so the code was nearly the same!

Send an "email" to my freshmeat box if you're interested!

[reply] [top]

[»] Re: I hacked mine to run both login and logout scripts...
by Izak Burger - Feb 13th 2003 23:12:28


> I hacked my pam_script module to have
> both a login and a logout script,
I've been thinking of doing this for a while, but it is very simple to implement and so far I have no need for that, as /etc/X11/Xsession is usually sufficient. But it might be useful for other uses, such as on pam aware ftp servers.

Anyway, if you want to send me a patch I'll incorporate it into the main source in some way, or at least include the patch in the tarball.



[reply] [top]

---