Merge pull request #65 from google/session_keyring

security: Add check option to UserKeyringID

1 files changed, 1 insertions, 1 deletions

diff --git a/pam/pam.go b/pam/pam.go
index a3642cc..0f20f30 100644
--- a/pam/pam.go
+++ b/pam/pam.go
@@ -131,7 +131,7 @@ func (h *Handle) GetItem(i Item) (unsafe.Pointer, error) {
 // StartAsPamUser sets the effective privileges to that of the PAM user, and
 // configures the PAM user's keyrings to be properly linked.
 func (h *Handle) StartAsPamUser() error {
-	if _, err := security.UserKeyringID(h.PamUser); err != nil {
+	if _, err := security.UserKeyringID(h.PamUser, true); err != nil {
 		log.Printf("Setting up keyrings in PAM: %v", err)
 	}
 	return security.SetThreadPrivileges(h.PamUser)