Comment # 11 on bug 1045886 from Josef M�llers

(In reply to Franck Bui from comment #10)
> OK, could you then include pam_keyinit.so in the pam setup in the next
> update and take over this bug ?
> 
> Thanks.

I've discussed this with the original maintainer and he pointed me at a caveat
in the pam_keyinit documentation:

"This module should not, generally, be invoked by programs like su, since it is
usually desirable for the key set to percolate through to the alternate
context. The keys have their own permissions system to manage this."

So, as pam installs the "common-session" script and util-linux installs
/etc/pam.d/su, which includes "common-session", it would not be wise to include
pam_keyinit.so there.