diff options
| author | Tavian Barnes <tavianator@tavianator.com> | 2020-11-11 11:40:35 -0500 |
|---|---|---|
| committer | Tomáš Mráz <tmraz@redhat.com> | 2020-11-12 09:31:34 +0100 |
| commit | e50eb5042c6ab3f8fc4da8ac16d327c7deb8247f (patch) | |
| tree | 99f2323877480cae381c7f4245b37980e7f66616 /modules/pam_faillock/pam_faillock.c | |
| parent | 62d826471e87e27b39a36ccbeee58999e2514a92 (diff) | |
| download | pam-e50eb5042c6ab3f8fc4da8ac16d327c7deb8247f.tar.gz pam-e50eb5042c6ab3f8fc4da8ac16d327c7deb8247f.tar.bz2 pam-e50eb5042c6ab3f8fc4da8ac16d327c7deb8247f.zip | |
faillock: Add a nodelay option
Fixes #295
Diffstat (limited to 'modules/pam_faillock/pam_faillock.c')
| -rw-r--r-- | modules/pam_faillock/pam_faillock.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/modules/pam_faillock/pam_faillock.c b/modules/pam_faillock/pam_faillock.c index ea177260..92cc0121 100644 --- a/modules/pam_faillock/pam_faillock.c +++ b/modules/pam_faillock/pam_faillock.c @@ -67,6 +67,7 @@ #define FAILLOCK_FLAG_NO_LOG_INFO 0x8 #define FAILLOCK_FLAG_UNLOCKED 0x10 #define FAILLOCK_FLAG_LOCAL_ONLY 0x20 +#define FAILLOCK_FLAG_NO_DELAY 0x40 #define MAX_TIME_INTERVAL 604800 /* 7 days */ #define FAILLOCK_CONF_MAX_LINELEN 1023 @@ -344,6 +345,9 @@ set_conf_opt(pam_handle_t *pamh, struct options *opts, const char *name, const c else if (strcmp(name, "local_users_only") == 0) { opts->flags |= FAILLOCK_FLAG_LOCAL_ONLY; } + else if (strcmp(name, "nodelay") == 0) { + opts->flags |= FAILLOCK_FLAG_NO_DELAY; + } else { pam_syslog(pamh, LOG_ERR, "Unknown option: %s", name); } @@ -654,7 +658,9 @@ pam_sm_authenticate(pam_handle_t *pamh, int flags, if (rv != PAM_SUCCESS) goto err; - pam_fail_delay(pamh, 2000000); /* 2 sec delay on failure */ + if (!(opts.flags & FAILLOCK_FLAG_NO_DELAY)) { + pam_fail_delay(pamh, 2000000); /* 2 sec delay on failure */ + } if ((rv=get_pam_user(pamh, &opts)) != PAM_SUCCESS) { goto err; |