From: Tobias Stoeckmann <tobias@stoeckmann.org>
Date: Sat, 20 Dec 2025 17:25:03 +0000 (+0000)
Subject: gshadow: Open audit socket after check_fds
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7e34e2d06abe00d289703f31ca427e03ae7eaa0e;p=thirdparty%2Fshadow.git

gshadow: Open audit socket after check_fds

Protect gshadow the same way as newgrp.

Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
---

diff --git a/src/gpasswd.c b/src/gpasswd.c
index a917de683..0ac6837c2 100644
--- a/src/gpasswd.c
+++ b/src/gpasswd.c
@@ -885,10 +885,6 @@ int main (int argc, char **argv)
 	struct passwd *pw = NULL;
 	struct option_flags  flags = {.chroot = false};
 
-#ifdef WITH_AUDIT
-	audit_help_open ();
-#endif
-
 	sanitize_env ();
 	check_fds ();
 
@@ -908,6 +904,10 @@ int main (int argc, char **argv)
 	log_set_logfd(stderr);
 
 	OPENLOG (Prog);
+#ifdef WITH_AUDIT
+	audit_help_open ();
+#endif
+
 	setbuf (stdout, NULL);
 	setbuf (stderr, NULL);