#26: Use more fail safe method of indicating success from unix_chkpwd
--------------------------+------------------------------
Reporter: tmraz | Owner: pam-developers@…
Type: enhancement | Status: new
Priority: major | Component: modules
Version: | Keywords: pam_unix
Blocked By: | Blocking:
--------------------------+------------------------------
Solar Designer reported that unix_chkpwd uses potentially fail unsafe
method of indicating success. Although there is no current known case
where failure in executing unix_chkpwd returned zero exit status it would
be much more safe to indicate the success by some arbitrary exit code
value.
I'd even rather suggest to use arbitrary string outputted to the stdout
which would be even safer.
I'll prepare a patch for this.
See also:
http://seclists.org/oss-sec/2014/q1/497
--
Ticket URL: <
https://fedorahosted.org/linux-pam/ticket/26>
linux-pam <
http://fedorahosted.org/linux-pam>
The Linux-PAM (Pluggable Authentication Modules) project