[patch] files/05_all_delete_response.patch

05_all_delete_response.patch (text/plain), 504 bytes, created by Ulrich Müller on 2013-08-26 20:50:41 UTC

https://bugs.gentoo.org/482588
Don't leave cleartext passwords lying around.

--- pam_skey-1.1.5/pam_skey.c
+++ pam_skey/pam_skey.c
@@ -129,6 +129,7 @@
     }
     if (strcasecmp(response,"s/key")!=0) {
       status = pam_set_item(pamh, PAM_AUTHTOK, response);
+      _pam_delete(response);
       if (status != PAM_SUCCESS)
 	return status;
       return PAM_IGNORE;
@@ -176,6 +177,7 @@
   }
 
   status = pam_set_item(pamh, PAM_AUTHTOK, response);
+  _pam_delete(response);
   return PAM_IGNORE;
 }