From 9cb4e8f28670455e12c97c2b68afb36db8bdf263 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Fri, 10 Feb 2012 19:11:33 +0100 Subject: [PATCH] Only fetch SELinux string if the user is found --- src/responder/pam/pamsrv_cmd.c | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c index 13dd09a9d4a76c67da89f69cc5ca096980c5e1d9..bf51148709cf2b396802a6198e874f013d4c422c 100644 --- a/src/responder/pam/pamsrv_cmd.c +++ b/src/responder/pam/pamsrv_cmd.c @@ -734,7 +734,8 @@ static void pam_reply(struct pam_auth_req *preq) return; } - if (pd->cmd == SSS_PAM_OPEN_SESSION) { + if (pd->cmd == SSS_PAM_OPEN_SESSION && + pd->pam_status == PAM_SUCCESS) { /* Try to fetch data from sysdb * (auth already passed -> we should have them) */ ret = get_selinux_string(preq); -- 1.7.7.6