bareos: master abe46203

Author Committer Branch Timestamp Parent
arogge arogge master 2022-03-10 11:31 master 21f80ccd Pending
Changeset dir: check account authorization during PAM login

Fixes CVE-2022-24755

Previously, when a user logged in via PAM, Bareos did only check for
authentication (i.e. the "auth" section in PAM). No authorization checks
were made (the "account" section in PAM). This patch now adds the proper
check.
This will break existing PAM configuration!
mod - core/src/dird/auth_pam.cc Diff File