]> git.puffer.fish Git - matthieu/frr.git/commit
packaging: Just permit anything if PAM is enabled
authorDonatas Abraitis <donatas@opensourcerouting.org>
Tue, 16 Jan 2024 19:14:30 +0000 (21:14 +0200)
committerDonatas Abraitis <donatas@opensourcerouting.org>
Sun, 28 Jan 2024 17:50:06 +0000 (19:50 +0200)
commite68c4f053905de7bc965667d57c330d080441cad
treec819132d7c39400d8d899246a1b596f13727aaaa
parent4d92badcde7573b97d2acc2228d0ca5fe7168e1e
packaging: Just permit anything if PAM is enabled

With a current pam_rootok.so, it works only with `root` account. If the user
is under `frrvty`, `frr` group, it gets the error:

```
% groups | grep -o -E "frrvty|frr"
frrvty
frr

% vtysh -c 'end'
vtysh_pam: Failed in account validation: Permission denied(6)
```

Checking the logs:

```
vtysh[23930]: pam_rootok(frr:account): root check failed
```

Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org>
debian/frr.pam
redhat/frr.pam