- (dtucker) [session.c] Call display_loginmsg again after do_pam_session.

   Ensures messages from PAM modules are displayed when privsep=no.

Note: I did not want to just move display_loginmsg since that would change
existing behaviour (order of expiry warnings, "Last Login", motd) to less
like the native tools.

1 files changed, 7 insertions, 0 deletions

diff --git a/session.c b/session.c
index cf2098931..a3a7ee784 100644
--- a/session.c
+++ b/session.c
@@ -1431,6 +1431,13 @@ do_child(Session *s, const char *command)
 #else /* HAVE_OSF_SIA */
                 do_nologin(pw);
                 do_setusercontext(pw);
+                /*
+                 * PAM session modules in do_setusercontext may have
+                 * generated messages, so if this in an interactive
+                 * login then display them too.
+                 */
+                if (command == NULL)
+                        display_loginmsg();
 #endif /* HAVE_OSF_SIA */
         }