diff options
Diffstat (limited to 'website/static/security/patches/EN-22:19/pam_exec.patch')
| -rw-r--r-- | website/static/security/patches/EN-22:19/pam_exec.patch | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/website/static/security/patches/EN-22:19/pam_exec.patch b/website/static/security/patches/EN-22:19/pam_exec.patch new file mode 100644 index 0000000000..64add12a9d --- /dev/null +++ b/website/static/security/patches/EN-22:19/pam_exec.patch @@ -0,0 +1,16 @@ +--- lib/libpam/modules/pam_exec/pam_exec.c.orig ++++ lib/libpam/modules/pam_exec/pam_exec.c +@@ -261,6 +261,13 @@ + /* don't prompt, only expose existing token */ + rc = pam_get_item(pamh, PAM_AUTHTOK, &item); + authtok = item; ++ if (authtok == NULL && rc == PAM_SUCCESS) { ++ openpam_log(PAM_LOG_ERROR, ++ "%s: pam_get_authtok(): %s", ++ func, "authentication token not available"); ++ OUT(PAM_SYSTEM_ERR); ++ } ++ + } else { + rc = pam_get_authtok(pamh, PAM_AUTHTOK, &authtok, NULL); + } |