title: Is the PAM stack always run as root?
body: <p>I'm writing a module for Linux PAM, which uses <code>setuid()</code> to drop privileges to the user being authenticated. Of course, this will only work if the EUID is root. So, is the PAM stack always run as root, regardless of the application using it?</p>