# A fully capable version of `su`

This directory contains a port of the `SimplePAMApp` `su` one that can
work in a `PURE1E` `libcap`-_mode_ environment.

The point of developing this is to better test the full `libcap`
implementation, and to also provide a non-setuid-root worked example
for testing PAM interaction with `libcap` and `pam_cap.so`. The
required expectations for `pam_unix.so` are that it include this
commit:

https://github.com/linux-pam/linux-pam/pull/373/commits/bf9b1d8ad909634000a7356af2d865a79d3f86f3

The original sources for this version of `su` were found here:

https://kernel.org/pub/linux/libs/pam/pre/applications/SimplePAMApps-0.60.tar.gz

The `SimplePAMApps` contain the same License as `libcap` (they were
originally started by the same authors!). The credited Authors in the
above tarball were:

-  Andrew [G.] Morgan
-  Andrey V. Savochkin
-  Alexei V. Galatenko

The code in this present directory is freely adapted from the above
tar ball and is thus a derived work from that.

**NOTE** As of the time of writing, this adaptation is likely rife
  with bugs.

Finally, Andrew would like to apologize to Andrey for removing all of
the config support he worked to add all those decades ago..! I just
wanted to make a quick tester for a potential workaround for this
`pam_cap.so` issue:

-  https://bugzilla.kernel.org/show_bug.cgi?id=212945

Andrew G. Morgan <morgan@kernel.org>
2021-06-30