[PATCH] support using pam_audit.so in "account" stack

Klaus Weidner klaus at atsec.com
Mon Feb 21 21:11:31 UTC 2005


Hello,

I can't get vsftp working with the pam_audit.so module, vsftpd unfortunately
doesn't appear to run the "auth" or "session" stack in a way that works
for pam_audit.so.

The patch below modifies the pam_audit.so module to allow it to be used
in the "account" stack also, which is a workaround for vsftpd. It
shouldn't break anything else since the module should only be added
exactly where needed, so it normally won't be in that stack for any
application that doesn't need it.

-Klaus

--- audit-0.6.3/pam-module/pam_audit.c.orig	2005-02-21 13:31:42.000000000 -0600
+++ audit-0.6.3/pam-module/pam_audit.c	2005-02-21 14:50:08.564934464 -0600
@@ -156,7 +156,7 @@
 PAM_EXTERN int
 pam_sm_acct_mgmt(pam_handle_t *pamh, int flags, int argc, const char **argv)
 {
-	return PAM_SUCCESS;
+	return _pam_audit_login(pamh, flags, argc, argv);
 }
 
 PAM_EXTERN int




More information about the Linux-audit mailing list