From 3bb39ea936a51a6a63a8b65a135521df098c32c4 Mon Sep 17 00:00:00 2001 From: Dariusz Gadomski Date: Wed, 8 Jan 2020 16:24:11 +0100 Subject: [PATCH] execute: Restore call to pam_setcred --- src/core/execute.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/core/execute.c b/src/core/execute.c index 11372958a6a..51b9a454bc8 100644 --- a/src/core/execute.c +++ b/src/core/execute.c @@ -1193,6 +1193,10 @@ static int setup_pam( if (pam_code != PAM_SUCCESS) goto fail; + pam_code = pam_setcred(handle, PAM_ESTABLISH_CRED | flags); + if (pam_code != PAM_SUCCESS) + goto fail; + pam_code = pam_open_session(handle, flags); if (pam_code != PAM_SUCCESS) goto fail; @@ -1277,6 +1281,10 @@ static int setup_pam( } } + pam_code = pam_setcred(handle, PAM_DELETE_CRED | flags); + if (pam_code != PAM_SUCCESS) + goto child_finish; + /* If our parent died we'll end the session */ if (getppid() != parent_pid) { pam_code = pam_close_session(handle, flags); -- 2.47.3