blob: 026d8c09c28b37b3a0f727066eb6998438936d26 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
* Add support for credential reinitialization in pam_group, closes: #108697
Index: pam.deb/modules/pam_group/pam_group.c
===================================================================
--- pam.deb.orig/modules/pam_group/pam_group.c
+++ pam.deb/modules/pam_group/pam_group.c
@@ -765,9 +765,12 @@
unsigned setting;
/* only interested in establishing credentials */
+ /* PAM docs say that an empty flag is to be treated as PAM_ESTABLISH_CRED.
+ Some people just pass PAM_SILENT, so cope with it, too. */
setting = flags;
- if (!(setting & (PAM_ESTABLISH_CRED | PAM_REINITIALIZE_CRED))) {
+ if (!(setting & (PAM_ESTABLISH_CRED | PAM_REINITIALIZE_CRED))
+ && (setting != 0) && (setting != PAM_SILENT)) {
D(("ignoring call - not for establishing credentials"));
return PAM_SUCCESS; /* don't fail because of this */
}
|
