Commit 8f90390c authored by Bastien Nocera's avatar Bastien Nocera

pam: Fix rhost check when rhost is unavailable

Don't exit early if the rhost field isn't filled in, as it usually isn't
for a lot of services.

Fixes: 3274a311
parent e061990f
Pipeline #54792 passed with stage
in 1 minute and 35 seconds
......@@ -477,13 +477,12 @@ PAM_EXTERN int pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc,
pam_get_item(pamh, PAM_RHOST, (const void **)(const void*) &rhost);
if (rhost == NULL || *rhost == '\0') {
/* unavailable host information */
return PAM_AUTHINFO_UNAVAIL;
}
if (strcmp (rhost, "localhost") != 0) {
/* remote login (e.g. over SSH) */
/* NULL or empty rhost if the host information is not available or set.
* "localhost" if the host is local.
* We want to not run for known remote hosts */
if (rhost != NULL &&
rhost != '\0' &&
strcmp (rhost, "localhost") != 0) {
return PAM_AUTHINFO_UNAVAIL;
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment