diff options
| author | Jeremy Allison <jra@samba.org> | 2007-12-12 17:26:49 -0800 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2007-12-12 17:26:49 -0800 |
| commit | 9373e1ea90c088b4a1156554efb9e1da1738a8d3 (patch) | |
| tree | ce685c61705e1140f8f871ca020c50c125507f48 /source3/pam_smbpass/pam_smb_passwd.c | |
| parent | 022014dba281a50d98ac2f00a4c941124065914f (diff) | |
| download | samba-9373e1ea90c088b4a1156554efb9e1da1738a8d3.tar.gz samba-9373e1ea90c088b4a1156554efb9e1da1738a8d3.tar.bz2 samba-9373e1ea90c088b4a1156554efb9e1da1738a8d3.zip | |
Fix bug #3727 with patch from Steve Langasek <vorlon@debian.org>
Jeremy.
(This used to be commit 0723760ba47a465d2ff5a22a680f1b5196eca7d8)
Diffstat (limited to 'source3/pam_smbpass/pam_smb_passwd.c')
| -rw-r--r-- | source3/pam_smbpass/pam_smb_passwd.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/source3/pam_smbpass/pam_smb_passwd.c b/source3/pam_smbpass/pam_smb_passwd.c index f0fa018217..de5310761f 100644 --- a/source3/pam_smbpass/pam_smb_passwd.c +++ b/source3/pam_smbpass/pam_smb_passwd.c @@ -129,6 +129,11 @@ int pam_sm_chauthtok(pam_handle_t *pamh, int flags, _log_err( LOG_DEBUG, "username [%s] obtained", user ); } + if (geteuid() != 0) { + _log_err(pamh, LOG_DEBUG, "Cannot access samba password database, not running as root."); + return PAM_AUTHINFO_UNAVAIL; + } + /* Getting into places that might use LDAP -- protect the app from a SIGPIPE it's not expecting */ oldsig_handler = CatchSignal(SIGPIPE, SIGNAL_CAST SIG_IGN); |