worker: Include setcred in setup phase
This commit is contained in:
@@ -90,6 +90,10 @@ fn worker(sock: &UnixDatagram) -> Result<(), Error> {
|
|||||||
}
|
}
|
||||||
pam.acct_mgmt(PamFlag::NONE)?;
|
pam.acct_mgmt(PamFlag::NONE)?;
|
||||||
|
|
||||||
|
// Not the credentials you think.
|
||||||
|
pam.setcred(PamFlag::ESTABLISH_CRED)?;
|
||||||
|
|
||||||
|
// Mark authentication as a success.
|
||||||
SessionChildToParent::Success.send(sock)?;
|
SessionChildToParent::Success.send(sock)?;
|
||||||
|
|
||||||
// Fetch our arguments from the parent.
|
// Fetch our arguments from the parent.
|
||||||
@@ -192,9 +196,6 @@ fn worker(sock: &UnixDatagram) -> Result<(), Error> {
|
|||||||
// Tell PAM what TTY we're targetting, which is used by logind.
|
// Tell PAM what TTY we're targetting, which is used by logind.
|
||||||
pam.set_item(PamItemType::TTY, &format!("/dev/tty{}", vt))?;
|
pam.set_item(PamItemType::TTY, &format!("/dev/tty{}", vt))?;
|
||||||
|
|
||||||
// Not the credentials you think.
|
|
||||||
pam.setcred(PamFlag::ESTABLISH_CRED)?;
|
|
||||||
|
|
||||||
// Session time!
|
// Session time!
|
||||||
pam.open_session(PamFlag::NONE)?;
|
pam.open_session(PamFlag::NONE)?;
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user