mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-09-02 07:15:27 +00:00
Code Issues Releases Wiki Activity

Call pam_open_session() and pam_close_session() to give pam_limits a

Browse Source 
chance to run.  Idea from Karel Zak.
This commit is contained in:
Todd C. Miller
2005-05-27 05:59:02 +00:00
parent c7ea24f2cc
commit d3b45ae3f1
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
auth/pam.c
View File

@@ -195,6 +195,18 @@ pam_prep_user(pw)
*/ */
(void) pam_setcred(pamh, PAM_ESTABLISH_CRED); (void) pam_setcred(pamh, PAM_ESTABLISH_CRED);
/*
* To fully utilize PAM sessions we would need to keep a
* sudo process around until the command exits. However, we
* can at least cause pam_limits to be run by opening and then
* immediately closing the session.
*/
if (pam_open_session(pamh, 0) != PAM_SUCCESS) {
(void) pam_end(pamh, error);
return(AUTH_FAILURE);
}
(void) pam_close_session(pamh, 0);
if (pam_end(pamh, PAM_SUCCESS | PAM_DATA_SILENT) == PAM_SUCCESS) if (pam_end(pamh, PAM_SUCCESS | PAM_DATA_SILENT) == PAM_SUCCESS)
return(AUTH_SUCCESS); return(AUTH_SUCCESS);
else else