diff options
| author | Deepak Das <ddas@redhat.com> | 2022-10-10 21:21:35 +0530 |
|---|---|---|
| committer | Dmitry V. Levin <ldv@altlinux.org> | 2022-11-07 09:00:18 +0000 |
| commit | 10086bc69663fa819277af244eeb5b629a2403b8 (patch) | |
| tree | 414f6e3f4dd8fde075f27741458ad1f6e34d82ae | |
| parent | bcbf145ce925934214e48200c27c9ff736452549 (diff) | |
| download | pam-10086bc69663fa819277af244eeb5b629a2403b8.tar.gz pam-10086bc69663fa819277af244eeb5b629a2403b8.tar.bz2 pam-10086bc69663fa819277af244eeb5b629a2403b8.zip | |
pam_faillock: avoid logging an erroneous consecutive login failure message
* modules/pam_faillock/pam_faillock.c (write_tally): Avoid logging
a consecutive login failure message for the root user in case when
even_deny_root is not set.
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2082442
| -rw-r--r-- | modules/pam_faillock/pam_faillock.c | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/modules/pam_faillock/pam_faillock.c b/modules/pam_faillock/pam_faillock.c index ddbb90e7..ca1c7035 100644 --- a/modules/pam_faillock/pam_faillock.c +++ b/modules/pam_faillock/pam_faillock.c @@ -374,9 +374,11 @@ write_tally(pam_handle_t *pamh, struct options *opts, struct tally_data *tallies } close(audit_fd); #endif - if (!(opts->flags & FAILLOCK_FLAG_NO_LOG_INFO)) { - pam_syslog(pamh, LOG_INFO, "Consecutive login failures for user %s account temporarily locked", - opts->user); + if (!(opts->flags & FAILLOCK_FLAG_NO_LOG_INFO) && + ((opts->flags & FAILLOCK_FLAG_DENY_ROOT) || (opts->uid != 0))) { + pam_syslog(pamh, LOG_INFO, + "Consecutive login failures for user %s account temporarily locked", + opts->user); } } |