Subject: Re: PAM enabled on head
To: Geoff Wing <mason@primenet.com.au>
From: Lubomir Sedlacik <salo@Xtrmntr.org>
List: current-users
Date: 03/08/2005 14:07:23
--rnP2AJ7yb1j09OW/
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Mar 08, 2005 at 01:00:42PM +0000, Geoff Wing wrote:
> Lubomir Sedlacik <salo@Xtrmntr.org> typed:
> : On Tue, Mar 08, 2005 at 10:41:46AM +0100, Bernd Ernesti wrote:
> :> Updates of /etc is allways not easy.
> : updates of /etc using proper mechanisms (/etc/postinstall and etcupdate)
> : are actually _very_ easy.
>=20
> With PAM, using postinstall, it's not.  postinstall is good for
> installing defaults like /etc/rc.d/  but whilst a default /etc/pam.d/*
> set is provided, the /etc/pam.d/ stuff is like /etc/rc.conf .  People
> may have altered it so overwriting it is not an option.  This is less
> an issue with infrequent updates between, say, major versions where it
> may be easy enough to use version control mechanisms like rcs (or cvs
> or whatever), however -current has seen several changes during its
> breaking in period which takes more time to fix than issuing
> "postinstall -s .... -d .... fix"

that's exactly what etcupdate(8) is for.


regards,

--=20
-- Lubomir Sedlacik <salo@{NetBSD,Xtrmntr,silcnet}.org>   --

--rnP2AJ7yb1j09OW/
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (NetBSD)

iD8DBQFCLaOKiwjDDlS8cmMRAjlnAKCSmBC0T1t4bJZwXm6gPmqU6khSAgCfRyVu
/cq8RpRUhFJLEufoHI2JSAk=
=E9PL
-----END PGP SIGNATURE-----

--rnP2AJ7yb1j09OW/--