On Jan 21, Ben Gertzfield <che@debian.org> wrote: >I've gone through the source code to shadow's su, and while it *DOES* >call pam_start() and pam_end(), it fails to call pam_open_session() >and pam_close_session(). I suppose this is the reason the tty device does not changes UID when I run su, isn't it? -- ciao, Marco