yubico-pam/drop_privs.h

#ifndef __PAM_YUBICO_DROP_PRIVS_H_INCLUDED__
#define __PAM_YUBICO_DROP_PRIVS_H_INCLUDED__

#include <pwd.h>

#ifdef HAVE_SECURITY_PAM_APPL_H
#include <security/pam_appl.h>
#endif
#ifdef HAVE_SECURITY_PAM_MODULES_H
#include <security/pam_modules.h>
#endif

int drop_privileges(struct passwd *, pam_handle_t *);
int restore_privileges(pam_handle_t *);

#endif
Drop privileges before opening user files. This change also ensures that user tokens are regular files. We may want to add a similar check for user challenge files. 2011-11-23 10:15:29 +01:00			`#ifndef __PAM_YUBICO_DROP_PRIVS_H_INCLUDED__`
			`#define __PAM_YUBICO_DROP_PRIVS_H_INCLUDED__`

			`#include <pwd.h>`

Use pam_modutil_drop_priv if it is available. Utility functions for what was done in drop_priv.c appeared in PAM 1.1.3. Use them when available. 2011-11-23 13:27:37 +01:00			`#ifdef HAVE_SECURITY_PAM_APPL_H`
			`#include <security/pam_appl.h>`
			`#endif`
			`#ifdef HAVE_SECURITY_PAM_MODULES_H`
			`#include <security/pam_modules.h>`
			`#endif`

			`int drop_privileges(struct passwd , pam_handle_t );`
			`int restore_privileges(pam_handle_t *);`
Drop privileges before opening user files. This change also ensures that user tokens are regular files. We may want to add a similar check for user challenge files. 2011-11-23 10:15:29 +01:00
			`#endif`