-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Matthew Saltzman wrote: > OK I stand corrected (makes sense, actually). But I still don't > get: > > (a) It appears that invoking /usr/bin/system-config-* as root does > not redundantly prompt for the root password as has been suggested > in this thread. /etc/pam.d/system-config-users (for example) includes config-util, which contains: auth sufficient pam_rootok.so > (b) How does consolehelper know what utility to invoke? It can't be > quite as simple as you suggest. For example, > /usr/bin/system-config-users is a symlink to consolehelper, but > there is no /usr/sbin/system-config-users program for consolehelper > to invoke. The consolehelper configs are stored in /etc/security/console.apps/. system-config-users contains: USER=root PROGRAM=/usr/share/system-config-users/system-config-users SESSION=true Hope that helps (and hope I've not missed something important :), - -- Todd OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp ====================================================================== No army can withstand the strength of an idea whose time has come. -- Victor Hugo (1802-1805) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQFDBAEBAgAtBQJE9F7gJhhodHRwOi8vd3d3LnBvYm94LmNvbS9+dG16L3BncC90 bXouYXNjAAoJEEMlk4u+rwzjeUIH/jOuHshw9Q5vNYudXay/zZ4+btW7+52W0pun +99iFPAQ6meRTyJ54L7AWNfFQ5mJUU0OAhYnwIrjH0llSQ86RiE92YMNbblZvPfQ njv+nMPFducOfhYr9r4Uhhf/i39Iiixtxrr79QlmqoT8N/LYOKHz0SUZ9nq9bexy th6oR/yRPWg7bHQP9PGBA2CMF1DZzGpRbz3cQtE6gonn++2qBLNXpJ1sHGe64P8o LUA3q+cxulhssZ6EH4JfztNJQstEKGdl04bT1Qdiqg7SAqn0tx3putocSeJ78YZY e/tMJ9Vf7QnQ4TTd+9N/hTnQtixvxMdekKTND4aWpoXGi2nTHTY= =wYvN -----END PGP SIGNATURE-----