PrivSep and PAM environment variable setting

Darren Tucker dtucker at
Sat Mar 11 12:03:00 EST 2006

On Fri, Mar 10, 2006 at 09:51:45AM -0600, Chris Adams wrote:
> I think I've seen this come up before, but I couldn't find an answer in
> the archives.
> I'm trying to use the PAM "" module on Linux to set the MAIL
> environment variable (so I don't have to try to do it in various shell
> init scripts), but the MAIL setting doesn't get passed through unless I
> disable PrivilegeSeparation.
> Is there a way to have PAM set environment variables when PrivSep is
> enabled?

I think it should work.  What version of OpenSSH and LinuxPAM are you
using, and what does the PAM config file look like?

Darren Tucker (dtucker at
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

More information about the openssh-unix-dev mailing list