- (dtucker) [auth-pam.c monitor.c session.c sshd.c] Bug #926: Move

   pam_open_session and pam_close_session into the privsep monitor, which
   will ensure that pam_session_close is called as root.  Patch from Tomas
   Mraz.

1 files changed, 5 insertions, 0 deletions

diff --git a/monitor.c b/monitor.c
index 2f23669cd..cc0e0fcac 100644
--- a/monitor.c
+++ b/monitor.c
@@ -1547,6 +1547,11 @@ mm_answer_term(int sock, Buffer *req)
         /* The child is terminating */
         session_destroy_all(&mm_session_close);
 
+#ifdef USE_PAM
+        if (options.use_pam)
+                sshpam_cleanup();
+#endif
+
         while (waitpid(pmonitor->m_pid, &status, 0) == -1)
                 if (errno != EINTR)
                         exit(1);