Passing information from app to module by pam_*env

[Tobias Heide <tucks gmx de>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi folks,

I hope, my posting won't arrive twice, because I first used a wrong
Sender-Address...

I am about to implement a XACML-PAM-Module for a student research
project. As a test-application I have to use a SOCKS5-Server, which
already has some basic PAM-Support (Dante).

But: I want to pass information from the Server to the PAM-Module, e.g.
the destination address of the request. The PAM-Module should then pass
this information to the XACML-"Server". The general goal is, to have
more information to make the authorisation-decision.

I plan to pass this information by pam_*env-functions. Is this a safe
way? Are there any objections? I could not find any module that makes
use of these functions, so I thought it might not be recommended?

Many kind regars,
tobi
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG3TZL1FY7cmdhGCwRApuGAJ42xvMke72ZBAswKxwVZ7nmMTrc0ACgq/uc
Jq9vuF89XSAerdH1aqc5834=
=A2kb
-----END PGP SIGNATURE-----