[sudo-users] sudo, xauth and the manual

[Dmitri Chubarov]

On Fri, 24 Sep 2004, Todd C. Miller wrote:

> It may be possible to have sudo use pam_open_session() and
> pam_close_session() along with pam_xauth.so to do this
> transparently. However, this would require a persistent sudo
> process that hangs around.
> 

I see, sudo would have to wait for the child process to complete 
to close down the session. 

Something over the lines of 

    pam_open_session()
    pid = fork();
    if (pid) wait();
    else execlp();
    pam_close_session();

This can be made a separate program called, say,
sudo_xsession so that one could write

     sudo [options] sudo_xsession command

Dima