Open
pam_unix: log about failure to execute unix_chkpwd(8) #151
jia-wenhao1017Add on Apr 21, 2025
pam_unix: log about failure to execute unix_chkpwd(8) #151
Open
Merged fromrefs/pull/151/headintoopenEuler-24.03-LTS-SP1
Total: 2 files changed+30-1
| @@ -0,0 +1,25 @@ | |||
| 1 | +From e41bb6a698623127ff2bc0f4af832d1d498f6920 Mon Sep 17 00:00:00 2001 | ||
| 2 | +From: jiawenhao <jiawenhao@xfusion.com> | ||
| 3 | +Date: Mon, 21 Apr 2025 16:39:40 +0800 | ||
| 4 | +Subject: [PATCH] log-about-failure-to-execute-unix_chkpwd | ||
| 5 | + | ||
| 6 | +--- | ||
| 7 | + modules/pam_unix/pam_unix_passwd.c | 2 +- | ||
| 8 | + 1 file changed, 1 insertion(+), 1 deletion(-) | ||
| 9 | + | ||
| 10 | +diff --git a/modules/pam_unix/pam_unix_passwd.c b/modules/pam_unix/pam_unix_passwd.c | ||
| 11 | +index c341741..446ee7e 100644 | ||
| 12 | +--- a/modules/pam_unix/pam_unix_passwd.c | ||
| 13 | ++++ b/modules/pam_unix/pam_unix_passwd.c | ||
| 14 | +@@ -286,7 +286,7 @@ static int _unix_run_update_binary(pam_handle_t *pamh, unsigned long long ctrl, | ||
| 15 | + DIAG_POP_IGNORE_CAST_QUAL; | ||
| 16 | + | ||
| 17 | + /* should not get here: exit with error */ | ||
| 18 | +- D(("helper binary is not available")); | ||
| 19 | ++ pam_syslog(pamh, LOG_ERR, "failed to execute %s: %m", UPDATE_HELPER); | ||
| 20 | + _exit(PAM_AUTHINFO_UNAVAIL); | ||
| 21 | + } else if (child > 0) { | ||
| 22 | + /* wait for child */ | ||
| 23 | +-- | ||
| 24 | +2.27.0 | ||
| 25 | + | ||
| @@ -4,7 +4,7 @@ | |||
| 4 | %define _pamconfdir %{_sysconfdir}/pam.d | 4 | %define _pamconfdir %{_sysconfdir}/pam.d |
| 5 | Name: pam | 5 | Name: pam |
| 6 | Version: 1.5.3 | 6 | Version: 1.5.3 |
| 7 | -Release: 8 | 7 | +Release: 9 |
| 8 | Summary: Pluggable Authentication Modules for Linux | 8 | Summary: Pluggable Authentication Modules for Linux |
| 9 | License: BSD and GPLv2+ | 9 | License: BSD and GPLv2+ |
| 10 | URL: http://www.linux-pam.org/ | 10 | URL: http://www.linux-pam.org/ |
| @@ -28,6 +28,7 @@ Patch5: backport-CVE-2024-10963.patch | |||
| 28 | Patch6: backport-CVE-2024-10041.patch | 28 | Patch6: backport-CVE-2024-10041.patch |
| 29 | Patch7: backport-CVE-2024-10041-pam_unix-try-to-set-uid-to-0-for-unix_chkpwd.patch | 29 | Patch7: backport-CVE-2024-10041-pam_unix-try-to-set-uid-to-0-for-unix_chkpwd.patch |
| 30 | Patch8: backport-libpam-use-close_range-to-close-file-descriptors.patch | 30 | Patch8: backport-libpam-use-close_range-to-close-file-descriptors.patch |
| 31 | +Patch9: backport-log-about-failure-to-execute-unix_chkpwd.patch | ||
| 31 | 32 | ||
| 32 | Patch9000:change-ndbm-to-gdbm.patch | 33 | Patch9000:change-ndbm-to-gdbm.patch |
| 33 | Patch9001:add-sm3-crypt-support.patch | 34 | Patch9001:add-sm3-crypt-support.patch |
| @@ -182,6 +183,9 @@ make check | |||
| 182 | 183 | ||
| 183 | 184 | ||
| 184 | %changelog | 185 | %changelog |
| 186 | +* Mon Apr 21 2025 jiawenhao <jiawenhao@xfusion.com> - 1.5.3-9 | ||
| 187 | +- log about failure to execute unix_chkpwd(8) | ||
| 188 | + | ||
| 185 | * Mon Mar 24 2025 hugel <gengqihu2@h-partners.com> - 1.5.3-8 | 189 | * Mon Mar 24 2025 hugel <gengqihu2@h-partners.com> - 1.5.3-8 |
| 186 | - backport patch libpam use close_range() to close file descriptors | 190 | - backport patch libpam use close_range() to close file descriptors |
| 187 | 191 | ||