[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

pam_group module & open files



Hi,
	The pam_group module dosn't close the group conf file after it
finishes with it. The result is that the fd gets passed on. The file is
opened read only, and dosn't contain anything really confidential, so its
not too much of a security hole.. Anyway at around line 723 (pam as
shipped with RH5.1) there just needs to be the line

		close(fd);

--
eman




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []