From 20047e7fdcfff6633d8201f0954be51f6378f1ae Mon Sep 17 00:00:00 2001
From: Tomas Mraz <tmraz@fedoraproject.org>
Date: Thu, 17 Dec 2015 17:43:27 +0100
Subject: Relax the conditions for fatal failure on auditing.

The PAM library calls will not fail anymore for any uid if the return
value from the libaudit call is -EPERM.

* libpam/pam_audit.c (_pam_audit_writelog): Remove check for uid != 0.
---
 libpam/pam_audit.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'libpam')

diff --git a/libpam/pam_audit.c b/libpam/pam_audit.c
index 24fb799a..97a9a929 100644
--- a/libpam/pam_audit.c
+++ b/libpam/pam_audit.c
@@ -53,7 +53,7 @@ _pam_audit_writelog(pam_handle_t *pamh, int audit_fd, int type,
   pamh->audit_state |= PAMAUDIT_LOGGED;
 
   if (rc < 0) {
-      if (rc == -EPERM && getuid() != 0)
+      if (rc == -EPERM)
           return 0;
       if (errno != old_errno) {
           old_errno = errno;
-- 
cgit v1.2.3