If fork fails, pam has to close session.

diff --git a/do_command.c b/do_command.c
index c0f632dbd3236499e0eaf1ca3b09476bc9c1a38a..5abce8ac74eddb6f0854fb915cbe56159eb6b5cf 100644 (file)
--- a/do_command.c
+++ b/do_command.c
@@ -196,6 +196,11 @@ child_process(entry *e, user *u) {
        switch (fork()) {
        case -1:
                log_it("CRON", getpid(), "error", "can't fork");
+#ifdef WITH_PAM
+                pam_setcred(pamh, PAM_DELETE_CRED | PAM_SILENT);
+                pam_close_session(pamh, PAM_SILENT);
+                pam_end(pamh, PAM_ABORT);
+#endif
                exit(ERROR_EXIT);
                /*NOTREACHED*/
        case 0: