[patch] pam_exec: use program exit code instead of PAM_SYSTEM_ERR

From: Jean-Sébastien Pédron <dumbbell_at_FreeBSD.org>
Date: Tue, 24 Jan 2012 15:25:06 +0100
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

If the specified program exits with non-zero, current implementation
of pam_exec(8) logs this code and return PAM_SYSTEM_ERR. Therefore,
applications have no idea what went wrong with authentication.

Attached is a patch that changes the behaviour to always return the
program exit code as-is. This lets the program returns meaningful
informations to applications.

I also added a small paragraph explaining this to the man page.

I'm planning to commit this to -CURRENT (maybe in a week or two) and
merge it to 9 and 8 if there're no objections.

Thanks for any comments!

- -- 
Jean-Sébastien Pédron
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8ev0IACgkQa+xGJsFYOlNjyACfSg6NgDLy+7VF6rEVV6yTINTd
rlgAoNpgWLvYBEL2DCejuPDz0yQRf5QY
=JEte
-----END PGP SIGNATURE-----

Received on Tue Jan 24 2012 - 13:25:09 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:23 UTC