Commit 8f90390c authored by Bastien Nocera's avatar Bastien Nocera

pam: Fix rhost check when rhost is unavailable

Don't exit early if the rhost field isn't filled in, as it usually isn't
for a lot of services.

Fixes: 3274a311
parent e061990f
Pipeline #54792 passed with stage
in 1 minute and 35 seconds
...@@ -477,13 +477,12 @@ PAM_EXTERN int pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc, ...@@ -477,13 +477,12 @@ PAM_EXTERN int pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc,
pam_get_item(pamh, PAM_RHOST, (const void **)(const void*) &rhost); pam_get_item(pamh, PAM_RHOST, (const void **)(const void*) &rhost);
if (rhost == NULL || *rhost == '\0') { /* NULL or empty rhost if the host information is not available or set.
/* unavailable host information */ * "localhost" if the host is local.
return PAM_AUTHINFO_UNAVAIL; * We want to not run for known remote hosts */
} if (rhost != NULL &&
rhost != '\0' &&
if (strcmp (rhost, "localhost") != 0) { strcmp (rhost, "localhost") != 0) {
/* remote login (e.g. over SSH) */
return PAM_AUTHINFO_UNAVAIL; return PAM_AUTHINFO_UNAVAIL;
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment