This is the second edition of our new spotlight series. Autumn is always a busy time at SUSE, when new service packs and products are prepared. This results also in an increased amount of review requests arriving for the SUSE security team. This post features a mixture of D-Bus interfaces, Polkit authentication, temporary file handling issues, a small PAM module and setgid-binary, Varlink IPC in systemd as well as some other topics.