gshadow: Open audit socket after check_fds

Protect gshadow the same way as newgrp.

Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>

diff --git a/src/gpasswd.c b/src/gpasswd.c
index a917de6830c604a67c96bf65309d4683b6249136..0ac6837c2c261adfd9e73572898c936c501f5b38 100644 (file)
--- a/src/gpasswd.c
+++ b/src/gpasswd.c
@@ -885,10 +885,6 @@ int main (int argc, char **argv)
        struct passwd *pw = NULL;
        struct option_flags  flags = {.chroot = false};
 
-#ifdef WITH_AUDIT
-       audit_help_open ();
-#endif
-
        sanitize_env ();
        check_fds ();
 
@@ -908,6 +904,10 @@ int main (int argc, char **argv)
        log_set_logfd(stderr);
 
        OPENLOG (Prog);
+#ifdef WITH_AUDIT
+       audit_help_open ();
+#endif
+
        setbuf (stdout, NULL);
        setbuf (stderr, NULL);