Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

pam_tcb: Add support for user authentication with SELinux. #10

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

pam_tcb: Add support for user authentication with SELinux. #10

wants to merge 4 commits into from

Commits on Oct 12, 2021

  1. Allow the helper binary to be run as root. 

    This is needed if e.g. SELinux prevents access to file
storing the hashed user password.

Signed-off-by: Björn Esser <[email protected]>
    @besser82
    besser82 committed Oct 12, 2021
    Configuration menu
    Copy the full SHA
    c9d16cd View commit details
    Browse the repository at this point in the history

  2. pam_tcb: Refactor unix_run_helper_binary(). 

    Refactor the function to be non-static and
to allow for more versatile use.

Signed-off-by: Björn Esser <[email protected]>
    @besser82
    besser82 committed Oct 12, 2021
    Configuration menu
    Copy the full SHA
    5cec73f View commit details
    Browse the repository at this point in the history

  3. tcb_chkpwd: Enhance the functionality of the helper program. 

    The tcb_chkpwd helper binary is now able to also perform verifications
for the expiration of user accounts.

Signed-off-by: Björn Esser <[email protected]>
    @besser82
    besser82 committed Oct 12, 2021
    Configuration menu
    Copy the full SHA
    706c4d4 View commit details
    Browse the repository at this point in the history

  4. pam_tcb: Use helper binary for expiration verification of a user acco… 

    …unt.

Perform verification through an external helper binary to possibly gain
higher privileges if the verification fails for insufficient credentials
in the first time.

Signed-off-by: Björn Esser <[email protected]>
    @besser82
    besser82 committed Oct 12, 2021
    Configuration menu
    Copy the full SHA
    1d98de0 View commit details
    Browse the repository at this point in the history