diff options
| author | Eric Biggers <ebiggers@google.com> | 2021-12-21 20:38:03 -0600 |
|---|---|---|
| committer | Eric Biggers <ebiggers@google.com> | 2021-12-21 21:55:01 -0600 |
| commit | b7399903540c95e89f0ee427fed1de07301fbd93 (patch) | |
| tree | 2aa1240435ff91f25b0f05923e80cb8b299ef337 /pam/pam.h | |
| parent | ce477ef12ac46c4df0152d43dae5d6e58772b120 (diff) | |
pam_fscrypt: warn user if OLDAUTHTOK not given in chauthtok
If someone runs 'passwd USER' as root, the user is assigned a new login
passphrase without their fscrypt login protector being updated. Detect
this case and show a warning message using pam_info().
Fixes https://github.com/google/fscrypt/issues/273
Diffstat (limited to 'pam/pam.h')
| -rw-r--r-- | pam/pam.h | 3 |
1 files changed, 3 insertions, 0 deletions
@@ -41,4 +41,7 @@ void *copyIntoSecret(void *data); // CleaupFunc that Zeros wipes a C string and unlocks and frees its memory. void freeSecret(pam_handle_t *pamh, char *data, int error_status); +// Sends a message to the application using pam_info(). +void infoMessage(pam_handle_t *pamh, const char *message); + #endif // FSCRYPT_PAM_H |