Relevant BUGIDs:

Purpose of commit: bugfix

Commit summary:
---------------
2009-11-19  Tomas Mraz  <t8m@centrum.cz>

        * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Return
        PAM_AUTH_ERR from the module if sepermit_lock() fails.

diff --git a/ChangeLog b/ChangeLog
index 8033486fab1c764fa0ba200a048ae8e35bfa9dfc..af4a0592ac6e2141082e317d7c026fa854c95506 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2009-11-19  Tomas Mraz  <t8m@centrum.cz>
+
+       * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Return
+       PAM_AUTH_ERR from the module if sepermit_lock() fails.
+
 2009-11-18  Tomas Mraz  <t8m@centrum.cz>
 
        * modules/pam_access/pam_access.c(user_match): Revert the netgroup

diff --git a/modules/pam_sepermit/pam_sepermit.c b/modules/pam_sepermit/pam_sepermit.c
index df0a2b1cb447aa7e4ecb1ce348999d0023a70e03..8b2360b57b5ec8003d1ce9ed22c3cf0e64437adb 100644 (file)
--- a/modules/pam_sepermit/pam_sepermit.c
+++ b/modules/pam_sepermit/pam_sepermit.c
@@ -314,7 +314,8 @@ sepermit_match(pam_handle_t *pamh, const char *cfgfile, const char *user,
                        if (ignore)
                                *sense = PAM_IGNORE;
                        if (geteuid() == 0 && exclusive)
-                               return sepermit_lock(pamh, user, debug);
+                               if (sepermit_lock(pamh, user, debug) < 0)
+                                       *sense = PAM_AUTH_ERR;
                }
                return 0;
        }