opendoas

commit a1ab056bccfe66d4f03b96e3f83168a3732e56f4
parent b3e966b7f3b921a686a7665f4b265b19c79c46f3
Author: Duncan Overbruck <mail@duncano.de>
Date:   Sat, 14 Nov 2020 16:28:27 +0100

pam: use PAM_REINITIALIZE_CRED

Both work fine, PAM_REINITIALIZE_CRED is the more correct
choice and is required on Solaris, see sudo bug #642;

https://bugzilla.sudo.ws/show_bug.cgi?id=642

Diffstat:
M
pam.c
 | 
4
++--

1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/pam.c b/pam.c
@@ -313,9 +313,9 @@ pamauth(const char *user, const char *myname, int interactive, int nopass, int p
 		warn("pam_set_item(?, PAM_USER, \"%s\"): %s", user,
 		    pam_strerror(pamh, ret));
 
-	ret = pam_setcred(pamh, PAM_ESTABLISH_CRED);
+	ret = pam_setcred(pamh, PAM_REINITIALIZE_CRED);
 	if (ret != PAM_SUCCESS)
-		warn("pam_setcred(?, PAM_ESTABLISH_CRED): %s", pam_strerror(pamh, ret));
+		warn("pam_setcred(?, PAM_REINITIALIZE_CRED): %s", pam_strerror(pamh, ret));
 	else
 		cred = 1;