From e8b5b04521f33d868ac3301802e3dab1f57588fd Mon Sep 17 00:00:00 2001 From: Damien Miller Date: Thu, 15 Feb 2001 11:32:15 +1100 Subject: - (djm) Move PAM session setup back to before setuid to user. Fixes problems on Solaris-derived PAMs. --- session.c | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) (limited to 'session.c') diff --git a/session.c b/session.c index a595a53cc..1cdc91ef4 100644 --- a/session.c +++ b/session.c @@ -1016,6 +1016,10 @@ do_child(const char *command, struct passwd * pw, const char *term, #endif /* WITH_IRIX_ARRAY */ #endif /* WITH_IRIX_JOBS */ +#ifdef USE_PAM + do_pam_session(pw->pw_name, ttyname); + do_pam_setcred(); +#endif /* USE_PAM */ /* login(1) is only called if we execute the login shell */ if (options.use_login && command != NULL) @@ -1129,11 +1133,6 @@ do_child(const char *command, struct passwd * pw, const char *term, shell = login_getcapstr(lc, "shell", (char *)shell, (char *)shell); #endif -#ifdef USE_PAM - do_pam_session(pw->pw_name, ttyname); - do_pam_setcred(); -#endif /* USE_PAM */ - #ifdef AFS /* Try to get AFS tokens for the local cell. */ if (k_hasafs()) { -- cgit v1.2.3