From 31a8f873dac892b15d374d8eb33037515678d6af Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Thu, 17 Apr 2008 14:29:02 +0000 Subject: Relevant BUGIDs: Purpose of commit: bugfix Commit summary: --------------- 2008-04-17 Tomas Mraz * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Do not try to lock if euid != 0. --- modules/pam_sepermit/pam_sepermit.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'modules/pam_sepermit') diff --git a/modules/pam_sepermit/pam_sepermit.c b/modules/pam_sepermit/pam_sepermit.c index 0d5ab21a..15cdc3e1 100644 --- a/modules/pam_sepermit/pam_sepermit.c +++ b/modules/pam_sepermit/pam_sepermit.c @@ -305,7 +305,7 @@ sepermit_match(pam_handle_t *pamh, const char *cfgfile, const char *user, free(line); fclose(f); if (matched) - return exclusive ? sepermit_lock(pamh, user, debug) : 0; + return (geteuid() == 0 && exclusive) ? sepermit_lock(pamh, user, debug) : 0; else return -1; } -- cgit v1.2.3