Modify the authentication API such that the init and cleanup functions

are always called, regardless of whether or not we are going to
verify a password.  This is needed for proper PAM session support.
This commit is contained in:
Todd C. Miller
2011-09-27 13:18:46 -04:00
parent c21595044d
commit bceb5df158
15 changed files with 163 additions and 116 deletions

View File

@@ -218,8 +218,10 @@ int user_is_exempt(void);
/* sudo_auth.c */
int verify_user(struct passwd *, char *);
int auth_begin_session(struct passwd *);
int auth_end_session();
int sudo_auth_begin_session(struct passwd *);
int sudo_auth_end_session(struct passwd *);
int sudo_auth_init(struct passwd *pw);
int sudo_auth_cleanup(struct passwd *pw);
/* parse.c */
int sudo_file_open(struct sudo_nss *);