Not surprised. It looks like it's really just a malicious configuration more than anything.
Fortunately, I'm pretty sure you already have to be root to modify PAM.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments