|
 |
905b4d |
From 157250faaf48514f1580c3de4abb224c190d243b Mon Sep 17 00:00:00 2001
|
|
|
905b4d |
From: Michal Zidek <mzidek@redhat.com>
|
|
|
905b4d |
Date: Thu, 9 Oct 2014 17:25:34 +0200
|
|
|
905b4d |
Subject: [PATCH 37/46] PAM: Run pam responder as nonroot
|
|
|
905b4d |
|
|
|
905b4d |
Reviewed-by: Pavel Reichl <preichl@redhat.com>
|
|
|
905b4d |
Reviewed-by: Simo Sorce <simo@redhat.com>
|
|
|
905b4d |
(cherry picked from commit 4e1892cdfcc5300d6632200c38ba67f2783d15f2)
|
|
|
905b4d |
---
|
|
|
905b4d |
src/monitor/monitor.c | 3 ++-
|
|
|
905b4d |
src/responder/pam/pamsrv.c | 2 +-
|
|
|
905b4d |
2 files changed, 3 insertions(+), 2 deletions(-)
|
|
|
905b4d |
|
|
|
905b4d |
diff --git a/src/monitor/monitor.c b/src/monitor/monitor.c
|
|
|
905b4d |
index 297648a60836cec1bd95c0a2972c8d14be32675a..2f622e571478b2a71ef29ed518ca3b80c077b766 100644
|
|
|
905b4d |
--- a/src/monitor/monitor.c
|
|
|
905b4d |
+++ b/src/monitor/monitor.c
|
|
|
905b4d |
@@ -1062,7 +1062,8 @@ static errno_t get_ping_config(struct mt_ctx *ctx, const char *path,
|
|
|
905b4d |
*/
|
|
|
905b4d |
static bool svc_supported_as_nonroot(const char *svc_name)
|
|
|
905b4d |
{
|
|
|
905b4d |
- if (strcmp(svc_name, "nss") == 0) {
|
|
|
905b4d |
+ if ((strcmp(svc_name, "nss") == 0)
|
|
|
905b4d |
+ || (strcmp(svc_name, "pam") == 0)) {
|
|
|
905b4d |
return true;
|
|
|
905b4d |
}
|
|
|
905b4d |
return false;
|
|
|
905b4d |
diff --git a/src/responder/pam/pamsrv.c b/src/responder/pam/pamsrv.c
|
|
|
905b4d |
index d3cf0c770ad2978e101f40453137ade8d826b8e1..c7e3c20b2731efb9393bc820ab09486c48e0a9ea 100644
|
|
|
905b4d |
--- a/src/responder/pam/pamsrv.c
|
|
|
905b4d |
+++ b/src/responder/pam/pamsrv.c
|
|
|
905b4d |
@@ -368,7 +368,7 @@ int main(int argc, const char *argv[])
|
|
|
905b4d |
return 2;
|
|
|
905b4d |
}
|
|
|
905b4d |
|
|
|
905b4d |
- ret = server_setup("sssd[pam]", 0, 0, 0, CONFDB_PAM_CONF_ENTRY, &main_ctx);
|
|
|
905b4d |
+ ret = server_setup("sssd[pam]", 0, uid, gid, CONFDB_PAM_CONF_ENTRY, &main_ctx);
|
|
|
905b4d |
if (ret != EOK) return 2;
|
|
|
905b4d |
|
|
|
905b4d |
ret = die_if_parent_died();
|
|
|
905b4d |
--
|
|
|
905b4d |
1.9.3
|
|
|
905b4d |
|