Bandie/pam_panic
Bandie/pam_panic
1
0
Fork 0
Code Issues 5 Pull Requests Releases Wiki Activity

Adding a sleep after 3 wrong passwords

Browse Source
This commit is contained in:
Bandie 2018-11-06 13:56:41 +01:00
parent 0caafc1f9e
commit d7cf035953
Signed by: Bandie
GPG Key ID: C1E133BC65A822DD
1 changed files with 19 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
src/pam_panic/pam_panic_password.c
View File

@ -87,31 +87,33 @@ int authPassword(pam_handle_t *pamh, char *serious_dev, int8_t bSerious, int8_t
return(PAM_ABORT); return(PAM_ABORT);
for(int i=0; i<3; i++){
pam_prompt(pamh, PAM_PROMPT_ECHO_OFF, &response, _("Password: "));
pam_prompt(pamh, PAM_PROMPT_ECHO_OFF, &response, _("Password: ")); // Abort on null response. xscreensaver is known for passing null instead of aborting.
// refer to https://bandie.org/programming/2018/04/24/pam_panic-Security-fix.html
if(!response)
return(PAM_ABORT);
// Abort on null response. xscreensaver is known for passing null instead of aborting. strcpy(resp, response);
// refer to https://bandie.org/programming/2018/04/24/pam_panic-Security-fix.html
if(!response)
return(PAM_ABORT);
strcpy(resp, response);
pwkey_tmp = crypt(resp, pw[0]); pwkey_tmp = crypt(resp, pw[0]);
strcpy(pwkey, pwkey_tmp); strcpy(pwkey, pwkey_tmp);
pwpanic_tmp = crypt(resp, pw[1]); pwpanic_tmp = crypt(resp, pw[1]);
strcpy(pwpanic, pwpanic_tmp); strcpy(pwpanic, pwpanic_tmp);
// Key? // Key?
if(!strcmp(pwkey, pw[0])) if(!strcmp(pwkey, pw[0]))
return (PAM_SUCCESS); return (PAM_SUCCESS);
if(!strcmp(pwpanic, pw[1])){ if(!strcmp(pwpanic, pw[1])){
return reject(serious_dev, bSerious, bReboot, bPoweroff); return reject(serious_dev, bSerious, bReboot, bPoweroff);
}
} }
sleep(5);
return (PAM_AUTH_ERR); return (PAM_AUTH_ERR);
} }