]> git.ipfire.org Git - thirdparty/shadow.git/commit
login & su: Treat an empty passwd field as invalid (#315)
authorHaelwenn Monnier <contact+github.com@hacktivis.me>
Mon, 29 Mar 2021 03:16:03 +0000 (05:16 +0200)
committerGitHub <noreply@github.com>
Mon, 29 Mar 2021 03:16:03 +0000 (22:16 -0500)
commitb865e14f255e3eb3e3fe2c86dde5888a4caa6c1c
treeee98156a59ab4abe4d57ef9b1a27f0c003ed6ed4
parent697901a328a2a295bf0836207f08898ce6ad9852
login & su: Treat an empty passwd field as invalid (#315)

* login & su: Treat an empty passwd field as invalid

Otherwise it's treated like the “require no password” clause while it probably
should be treated like a normal su that can't validate anyway.

A similar change should be done for USE_PAM.

* su & login: Introduce PREVENT_NO_AUTH
etc/login.defs
lib/getdef.c
src/login.c
src/su.c