From b92d8459e788233223e328ab0e79980e3cd44d97 Mon Sep 17 00:00:00 2001 From: Andreas Henriksson Date: Thu, 9 Jan 2020 21:06:17 +0100 Subject: pam_umask: add new 'nousergroups' module argument This is particularly useful when pam has been built with the new --enable-usergroups configure switch, allowing users to override the default-enabled state and disabling usergroups at runtime. This is synonymous but opposite to current and previous pam_umask default that could be changed to enabled at runtime with the usergroups argument. --- modules/pam_umask/pam_umask.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'modules') diff --git a/modules/pam_umask/pam_umask.c b/modules/pam_umask/pam_umask.c index f101919f..1446c6de 100644 --- a/modules/pam_umask/pam_umask.c +++ b/modules/pam_umask/pam_umask.c @@ -79,6 +79,8 @@ parse_option (const pam_handle_t *pamh, const char *argv, options_t *options) options->umask = strdup (&argv[6]); else if (strcasecmp (argv, "usergroups") == 0) options->usergroups = 1; + else if (strcasecmp (argv, "nousergroups") == 0) + options->usergroups = 0; else if (strcasecmp (argv, "silent") == 0) options->silent = 1; else -- cgit v1.2.3