--- Linux-PAM-0.99.6.2.orig/modules/pam_xauth/README

+++ Linux-PAM-0.99.6.2/modules/pam_xauth/README

@@ -35,8 +35,8 @@ is not root, the user will forward cooki

 /.xauth/export file, and the invoking user is root, the user will not forward

 cookies to other users.

-Both the import and export files support wildcards (such as *). Both the import

-and export files can be empty, signifying that no users are allowed.

+Both the import and export files can be empty, signifying that no users

+are allowed.

 OPTIONS

--- Linux-PAM-0.99.6.2.orig/modules/pam_xauth/pam_xauth.8

+++ Linux-PAM-0.99.6.2/modules/pam_xauth/pam_xauth.8

@@ -55,8 +55,7 @@ file, and the invoking user is

 \fInot\fR

 forward cookies to other users.

 .PP

-Both the import and export files support wildcards (such as

-\fI*\fR). Both the import and export files can be empty, signifying that no users are allowed.

+Both the import and export files can be empty, signifying that no users are allowed.

 .SH "OPTIONS"

 .TP 3n

 \fBdebug\fR

--- Linux-PAM-0.99.6.2.orig/modules/pam_xauth/pam_xauth.8.xml

+++ Linux-PAM-0.99.6.2/modules/pam_xauth/pam_xauth.8.xml

@@ -88,9 +88,8 @@

       other users.

     </para>

     <para>

-      Both the import and export files support wildcards (such as

-      <emphasis remap='I'>*</emphasis>). Both the import and export files

-      can be empty, signifying that no users are allowed.

+      Both the import and export files can be empty, signifying that no

+      users are allowed.

     </para>

   </refsect1>

--- Linux-PAM-0.99.6.2.orig/modules/pam_xauth/pam_xauth.c

+++ Linux-PAM-0.99.6.2/modules/pam_xauth/pam_xauth.c

@@ -38,7 +38,6 @@ #include <sys/types.h>

 #include <sys/fsuid.h>

 #include <sys/wait.h>

 #include <errno.h>

-#include <fnmatch.h>

 #include <grp.h>

 #include <limits.h>

 #include <netdb.h>

@@ -236,7 +235,7 @@ check_acl(pam_handle_t *pamh,

 			if (tmp != NULL) {

 				*tmp = '\0';

 			}

-			if (fnmatch(buf, other_user, 0) == 0) {

+			if (strcmp(buf, other_user) == 0) {

 				if (debug) {

 					pam_syslog(pamh, LOG_DEBUG,

 						   "%s %s allowed by %s",