id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
1491	Shadow and PAM	larry@…	bdubbs@…	"I have found one situation where it doesn't work as it did. su used to get its
PATH from /etc/login.defs using ENV_PATH and ENV_SUPATH.  These are no longer
available and according to the mailing list, are pam's responsibility.  So the
path after su or su <user> is ""/usr/gnu/bin:/usr/local/bin:/bin:/usr/bin:.""
(default path coded in Bash source).  This does not affect ""su -"" as that
sources /etc/profile.  The PATH can be set by the pam_env.so module by editing
/etc/security/pam_env.conf:
PATH          DEFAULT=/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin \
OVERRIDE=${PATH}
and adding pam_env.conf to the auth section of /etc/pam.d/su.

I have not found a way to drop in a default PATH for root when su is used. 
Under these conditions, ""su -"" is the only sure way to get a root path."	defect	closed	high		BOOK	b-6.1-pre1	trivial	fixed