[Bug 270595] security/plasma5-kscreenlocker: PAM error

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=270595

--- Comment #5 from Felix Palmen <zirias at freebsd.org> ---
(In reply to Andriy Gapon from comment #4)
> I suspect that the following line in /usr/local/etc/pam.d/kde is related to the
> message:

> auth    sufficient      pam_exec.so     return_prog_exit_status expose_authtok /usr/local/libexec/unix-selfauth-helper

Indirectly, yes. As far as I understood, pam_exec always attempts to obtain an
already existing authtok in pam_sm_setcred() when the expose_authtok argument
is given. Before the bugfix, it just segfaulted when there was none, now it
returns a PAM system error instead.

I didn't fully understand that fix back then (e.g. why it returns an error in
that case), but it was reviewed/approved by des at .

Anyways, that error is completely harmless (and expected when no other PAM
module already set an authtok previously).

-- 
You are receiving this mail because:
You are the assignee for the bug.