path: root/doc/modules/pam_pwdb.sgml
diff options
authorAndrew G. Morgan <>2002-07-11 05:43:50 +0000
committerAndrew G. Morgan <>2002-07-11 05:43:50 +0000
commit449f88eeb44e910b25261e8e5bead120d3757fec (patch)
treef7e975a38ddc879704eeae18123ac74a4c3c12ca /doc/modules/pam_pwdb.sgml
parentf58075a0497ae9c32a43a71a1bdb1d1b6c9e83d4 (diff)
Relevant BUGIDs: 476963
Purpose of commit: new feature Commit summary: --------------- some applications are not prepared to get a SIGCHLD from a child process they didn't think they launched, so we now suppress this signal for the duration of use of the helper binary. The 'noreap' module argument is provided to override this new default.
Diffstat (limited to 'doc/modules/pam_pwdb.sgml')
1 files changed, 10 insertions, 2 deletions
diff --git a/doc/modules/pam_pwdb.sgml b/doc/modules/pam_pwdb.sgml
index 2ee102e1..51f4f86d 100644
--- a/doc/modules/pam_pwdb.sgml
+++ b/doc/modules/pam_pwdb.sgml
@@ -99,7 +99,8 @@ login account required
@@ -137,7 +138,14 @@ password when it is stored in a read protected database. This binary
is very simple and will only check the password of the user invoking
it. It is called transparently on behalf of the user by the
authenticating component of this module. In this way it is possible
-for applications like <em>xlock</em> to work without being setuid-root.
+for applications like <em>xlock</em> to work without being
+setuid-root. The module, by default, will temporarily turn off
+<tt/SIGCHLD/ handling for the duration of execution of the helper
+binary. This is generally the right thing to do, as many applications
+are not prepared to handle this signal from a child they didn't know
+was <tt/fork()/d. The <tt/noreap/ module argument can be used to
+suppress this temporary shielding and may be needed for use with
+certain applications.
The <tt>likeauth</tt> argument makes the module return the same value