Subject: Re: PAM enabled on head
To: None <current-users@netbsd.org>
From: Christos Zoulas <christos@tac.gw.com>
List: current-users
Date: 03/08/2005 20:07:43
In article <Pine.NEB.4.51.0503081613410.2105@lothlorien.starwolf.com>,
Greywolf  <greywolf@starwolf.com> wrote:
>[Thus spake John Nemeth ("JN: ") 2:54am...]
>
>JN: } Comparing it to /etc/passwd is not fair.
>JN:
>JN:      Sure it is.
>
>Sure...in the same way that you are saying that "well, we've added this
>thing called a security ignition to your car, so you must now not only
>put in the key to the ignition, but you must mumble a serial number
>backwards in Swahili before it will let you engage the starter.  Free
>of charge.  Figured we'd put it in while we fixed your tire.  You don't
>mind this, do you?  It's all the rage these days, you know."

Actually the breathalizer is a better example. It is required by law
on some states if you are caught DWI.

>JN:      It's called /rescue.
>
>That's a fine piece of management, there.
>
>Neither /rescue NOR pam should ever be required, IMO.  But then, "Ahhh,
>WTF does *he* know?", right?

You don't need rescue. Booting single user is good enough.

christos