From 5a88e963744e5da453e88b5c36499f04712df097 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Tue, 9 Feb 2010 12:39:49 +0100
Subject: Add better checks on PAM socket

- check if the public socket belongs to root and has 0666 permissions
- use a SCM_CREDENTIALS message if available
---
 src/responder/common/responder.h | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'src/responder/common/responder.h')

diff --git a/src/responder/common/responder.h b/src/responder/common/responder.h
index ea6ba5831..6391fcf7c 100644
--- a/src/responder/common/responder.h
+++ b/src/responder/common/responder.h
@@ -101,6 +101,10 @@ struct cli_ctx {
     struct cli_request *creq;
     struct cli_protocol_version *cli_protocol_version;
     int priv;
+    int creds_exchange_done;
+    int client_uid;
+    int client_gid;
+    int client_pid;
 };
 
 struct sss_cmd_table {
-- 
cgit