pam_cap(8)

NAME
     pam_cap - IRIX capabilities PAM Service Module

SYNOPSIS
     /usr/lib32/security/pam_cap.so /usr/lib64/security/pam_cap.so

DESCRIPTION
     This module assumes that the user name has been set. If no arguments are
     provided, the module checks to see if the CAP environment module has been
     set by the application. If it is, the module will attempt to authenticate
     the capability set against the user. Otherwise, this module will prompt
     the user for the desired capability set. If no capability set is entered,
     it will set the capability set to default to "all="

     When the user is authenticated successfully, the module will set the PAM
     environment variable, "CAP" with the capabilities that the user is
     allowed.  The application can retrieve this information using
     pam_getenv().


RECOGNIZED ARGUMENTS
     noprompt
          Will not prompt the user for desired capability set Instead, it will
          attempt to get it from environment variable: CAP.  If this variable
          is not defined, the default capability set is "all="


NOTES
     The module will store the capability set that the user is cleared for in
     the environment variable: CAP.

     So in your application, after doing a pam_authenticate, obtain the
     capability set by using pam_getenv(pamh, "CAP").


FILES
     /etc/pam.d/*
     /etc/config/pam

SEE ALSO
     pam(8), pam_chkconfig(3), pam_modules(8), capabilities(4)