Re: Proposed modules: my consensus so far

[Mark McLoughlin <markmc redhat com>]

Hi Danilo,

On Mon, 2004-11-29 at 18:43 +0100, Danilo Šegan wrote:
> Today at 17:56, Mark McLoughlin wrote:
> 
> > 	What I'm getting at is that, in this case, it appears to me a "this
> > program should prompt for the root password at startup" interface works
> > out better than a "run this program as root" API[1].
> 
> Except that it doesn't sound too nice to have your root password
> lurking around the memory in cleartext or reversable hash form (so it
> could be used for actual su calls) for entire program lifetime—if I
> didn't miss anything.

	No, that's not the way it works - you authenicate via PAM and your
password would be cleared from memory just like when you login.

Cheers,
Mark.