pam stuff needs to run as root, not user, for shadow passwords

diff --git a/check.c b/check.c
index 551f8add521b14653a36b2df171b90898e9dc9a6..883d00ec24238086ff4b770336f40a782c00c22a 100644 (file)
--- a/check.c
+++ b/check.c
@@ -746,7 +746,7 @@ static void pam_attempt_auth()
     int retval;
     register int counter = TRIES_FOR_PASSWORD;
 
-    /* printf("PAM Authentication\n"); */
+    set_perms(PERM_ROOT, 0);
     retval = pam_start("sudo", user_name, &conv, &pamh);
     if (retval != PAM_SUCCESS) {
         pam_end(pamh, retval);