pam_exec environment data is not a safe secret channel

<h1> pam_exec environment data is not a safe secret channel </h1> <p><code>pam_exec</code> runs an external command during a PAM module stage. It is available for authentication, account, password, and session processing. It also exports PAM items as environment variables and can expose the authentication token when configured to do so. Those features make it useful for integration and dangerous w

Read the source →