Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

auth-pam: Check the user didn't change during PAM transaction #521

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

auth-pam: Check the user didn't change during PAM transaction #521

wants to merge 1 commit into from

Commits on Sep 30, 2024

  1. auth-pam: Check the user didn't change during PAM transaction 

    PAM modules can change the user during their execution, in such case ssh
would still use the user that has been provided giving potentially
access to another user with the credentials of another one.

So prevent this to happen, by ensuring that the final PAM user is
matching the one that initiated the transaction.
    @3v1n0
    3v1n0 committed Sep 30, 2024
    Configuration menu
    Copy the full SHA
    bda15bb View commit details
    Browse the repository at this point in the history