From e600e04072e7fe89168209b813f953985350159e Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Thu, 19 Nov 2009 10:43:23 +0000 Subject: Relevant BUGIDs: Purpose of commit: bugfix Commit summary: --------------- 2009-11-19 Tomas Mraz * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Return PAM_AUTH_ERR from the module if sepermit_lock() fails. --- ChangeLog | 5 +++++ modules/pam_sepermit/pam_sepermit.c | 3 ++- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 8033486f..af4a0592 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,8 @@ +2009-11-19 Tomas Mraz + + * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Return + PAM_AUTH_ERR from the module if sepermit_lock() fails. + 2009-11-18 Tomas Mraz * modules/pam_access/pam_access.c(user_match): Revert the netgroup diff --git a/modules/pam_sepermit/pam_sepermit.c b/modules/pam_sepermit/pam_sepermit.c index df0a2b1c..8b2360b5 100644 --- a/modules/pam_sepermit/pam_sepermit.c +++ b/modules/pam_sepermit/pam_sepermit.c @@ -314,7 +314,8 @@ sepermit_match(pam_handle_t *pamh, const char *cfgfile, const char *user, if (ignore) *sense = PAM_IGNORE; if (geteuid() == 0 && exclusive) - return sepermit_lock(pamh, user, debug); + if (sepermit_lock(pamh, user, debug) < 0) + *sense = PAM_AUTH_ERR; } return 0; } -- cgit v1.2.3