Return PAM_IGNORE from pam_sm_authenticate
ClosedPublic

Authored by aacid on May 15 2018, 10:57 PM.

Details

Summary

PAM_SUCCESS signals to the PAM stack that the
authentication succeeded. That is actually not the case, because
pam_kwallet doesn't authenticate anything. If a user would badly configure
his PAM stack by classifying pam_kwallet as sufficient then login would
always be possible.

Diff Detail

Repository
R107 KWallet PAM Integration
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.
aacid created this revision.May 15 2018, 10:57 PM
Restricted Application added a project: Plasma. · View Herald TranscriptMay 15 2018, 10:57 PM
Restricted Application added a subscriber: plasma-devel. · View Herald Transcript
aacid requested review of this revision.May 15 2018, 10:57 PM
davidedmundson accepted this revision.May 16 2018, 6:01 AM
This revision is now accepted and ready to land.May 16 2018, 6:01 AM
This revision was automatically updated to reflect the committed changes.