]> git.apps.os.sepia.ceph.com Git - fscrypt.git/commit
projects / fscrypt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ce477ef) | patch
pam_fscrypt: warn user if OLDAUTHTOK not given in chauthtok
authorEric Biggers <ebiggers@google.com>
Wed, 22 Dec 2021 02:38:03 +0000 (20:38 -0600)
committerEric Biggers <ebiggers@google.com>
Wed, 22 Dec 2021 03:55:01 +0000 (21:55 -0600)
commitb7399903540c95e89f0ee427fed1de07301fbd93
tree2aa1240435ff91f25b0f05923e80cb8b299ef337tree | snapshot
parentce477ef12ac46c4df0152d43dae5d6e58772b120commit | diff
pam_fscrypt: warn user if OLDAUTHTOK not given in chauthtok

If someone runs 'passwd USER' as root, the user is assigned a new login
passphrase without their fscrypt login protector being updated.  Detect
this case and show a warning message using pam_info().

Fixes https://github.com/google/fscrypt/issues/273
pam/pam.c diff | blob | history
pam/pam.go diff | blob | history
pam/pam.h diff | blob | history
pam_fscrypt/pam_fscrypt.go diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.