Move socket creation to unprivileged codepath

Authored by aacid on May 1 2018, 10:32 AM.

Description

Move socket creation to unprivileged codepath

We don't need to be creating the socket as root, and doing so,
specially having a chown is problematic security wise.

Details

Committed
aacidMay 3 2018, 10:04 AM
Parents
R107:2134dec85ce1: Move salt creation to an unprivileged process
Branches
Unknown
Tags
Unknown
sbeattie added inline comments.May 3 2018, 10:57 PM
/pam_kwallet.c
397

Given the comment above about pam_syslog() not working in the child process, and to use syslog() directly, shouldn't this and the following moved logging calls be converted to use syslog()?