From e9d8563c0c715dde27325583a1e3c8cf234c6357 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Thu, 1 Nov 2012 20:18:23 +0100
Subject: PAM: Do not leak fd after SELinux context file is written

https://fedorahosted.org/sssd/ticket/1619

We don't close the fd when we write the selinux login file in the pam
responder. This results in a fd leak.
---
 src/responder/pam/pamsrv_cmd.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 2b20544d1..bb0d8db38 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -443,6 +443,7 @@ static errno_t write_selinux_login_file(const char *username, char *string)
     } else {
         ret = EOK;
     }
+    close(fd);
     fd = -1;
 
 done:
-- 
cgit