diff options
| author | Tobias Stoeckmann <tobias@stoeckmann.org> | 2024-01-15 18:16:46 +0100 |
|---|---|---|
| committer | Tobias Stoeckmann <tobias@stoeckmann.org> | 2024-01-15 18:18:00 +0100 |
| commit | 94386184f67fd0870fa56eef2a2d473943c03eb1 (patch) | |
| tree | cac72f1e2253ac11cdcaf5bb2756366ad80220be | |
| parent | 43f35ea9e6ea77bd51ec609d3889af227d58ebc8 (diff) | |
| download | pam-94386184f67fd0870fa56eef2a2d473943c03eb1.tar.gz pam-94386184f67fd0870fa56eef2a2d473943c03eb1.tar.bz2 pam-94386184f67fd0870fa56eef2a2d473943c03eb1.zip | |
pam_pwhistory: disable SELinux code if not used
Disable code to run helper binary if SELinux is not enabled.
Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
| -rw-r--r-- | modules/pam_pwhistory/pam_pwhistory.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/modules/pam_pwhistory/pam_pwhistory.c b/modules/pam_pwhistory/pam_pwhistory.c index 98ddffce..7ff74bdf 100644 --- a/modules/pam_pwhistory/pam_pwhistory.c +++ b/modules/pam_pwhistory/pam_pwhistory.c @@ -112,6 +112,7 @@ parse_option (pam_handle_t *pamh, const char *argv, options_t *options) pam_syslog (pamh, LOG_ERR, "pam_pwhistory: unknown option: %s", argv); } +#ifdef WITH_SELINUX static int run_save_helper(pam_handle_t *pamh, const char *user, int howmany, const char *filename, int debug) @@ -287,6 +288,7 @@ run_check_helper(pam_handle_t *pamh, const char *user, return retval; } +#endif /* This module saves the current hashed password in /etc/security/opasswd and then compares the new password with all entries in this file. */ @@ -332,8 +334,10 @@ pam_sm_chauthtok (pam_handle_t *pamh, int flags, int argc, const char **argv) retval = save_old_pass (pamh, user, options.remember, options.filename, options.debug); +#ifdef WITH_SELINUX if (retval == PAM_PWHISTORY_RUN_HELPER) retval = run_save_helper(pamh, user, options.remember, options.filename, options.debug); +#endif if (retval != PAM_SUCCESS) return retval; @@ -366,8 +370,10 @@ pam_sm_chauthtok (pam_handle_t *pamh, int flags, int argc, const char **argv) pam_syslog (pamh, LOG_DEBUG, "check against old password file"); retval = check_old_pass (pamh, user, newpass, options.filename, options.debug); +#ifdef WITH_SELINUX if (retval == PAM_PWHISTORY_RUN_HELPER) retval = run_check_helper(pamh, user, newpass, options.filename, options.debug); +#endif if (retval != PAM_SUCCESS) { |