Report an error if one of the modules in the chain does not implement

the requested primitive.  This is a significant change, but it should
only affect poorly-written PAM modules, and the alternative is a
potential fail-open situation.


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@501 185d5e19-27fe-0310-9dcf-9bff6b9f3609
This commit is contained in:
Dag-Erling Smørgrav 2011-12-07 01:28:05 +00:00
parent 229c006c86
commit 996a845863
1 changed files with 1 additions and 1 deletions

View File

@ -105,7 +105,7 @@ openpam_dispatch(pam_handle_t *pamh,
if (chain->module->func[primitive] == NULL) {
openpam_log(PAM_LOG_ERROR, "%s: no %s()",
chain->module->path, pam_sm_func_name[primitive]);
continue;
r = PAM_SYSTEM_ERR;
} else {
pamh->primitive = primitive;
pamh->current = chain;