Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Jan 2002 10:53:03 -0800 (PST)
From:      Dag-Erling Smorgrav <des@FreeBSD.org>
To:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   cvs commit: src/lib/libpam/modules/pam_opieaccess pam_opieaccess.c
Message-ID:  <200201211853.g0LIr3J91205@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
des         2002/01/21 10:53:03 PST

  Modified files:
    lib/libpam/modules/pam_opieaccess pam_opieaccess.c 
  Log:
  Return PAM_SERVICE_ERR rather than PAM_USER_UNKNOWN if getpwnam() fails, as
  PAM_USER_UNKNOWN will break the chain, revealing to an attacker that the
  user does not exist.
  
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.2       +1 -1      src/lib/libpam/modules/pam_opieaccess/pam_opieaccess.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200201211853.g0LIr3J91205>