[redhat-lspp] Re: [PATCH] pam_namespace module patch

[Russell Coker]

On Mon, 2006-02-20 at 10:34 -0500, Janak Desai wrote:
> This also exposed a current problem with the namespace module, which 
> will deny
> login if the directory to polyinstantiate doesn't exist. I think that's 
> too severe.
> If the directory to polinstantiate doesn't exist, the module should skip 
> that line.
> I will add an access(dir, F_OK) call to the parsing routine to skip 
> namespace.conf
> lines that are trying to polyinstantiate non-existent directories.

Wouldn't it make more sense to have a module parameter to specify the
action in this case?  I can imagine situations where failure would be
regarded as the correct option.