emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

Call pam_end() after fork in child code path

Browse Source 
This conforms to PAM documentation and it is needed to support
ambient capabilities with PAM + libcap-2.58+.

Signed-off-by: Björn Fischer <bf@CeBiTec.Uni-Bielefeld.DE>
This commit is contained in:
Björn Fischer 2021-09-08 15:03:36 +02:00 committed by Serge Hallyn
parent 4624e9fca1
commit 6938bab429
2 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/login.c
View File

@ -1288,6 +1288,7 @@ int main (int argc, char **argv)
env++;
}
}
(void) pam_end (pamh, PAM_SUCCESS | PAM_DATA_SILENT);
#endif
(void) setlocale (LC_ALL, "");

9
src/su.c
View File

@ -1156,12 +1156,9 @@ int main (int argc, char **argv)
}
}
/*
* PAM_DATA_SILENT is not supported by some modules, and
* there is no strong need to clean up the process space's
* memory since we will either call exec or exit.
pam_end (pamh, PAM_SUCCESS | PAM_DATA_SILENT);
*/
#ifdef USE_PAM
(void) pam_end (pamh, PAM_SUCCESS | PAM_DATA_SILENT);
#endif
endpwent ();
endspent ();