mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-11-26 12:06:19 -05:00
91a76db66b
For root, faillock appears to always* return an empty string (i.e. no table headers are present), yielding a zero-initialized pam_faillock_output_count and thus resulting in the calculation of a negative failed_login_counter value. This can cause erroneous errors of the form "ERROR: Login blocked after [negative number] attempts" during sudo-ing and screen unlocking. This commit modifies the initialization of failed_login_counter such that it cannot be negative and prevents the display of these incorrect warnings. * Only rudimentary local tests were conducted |
||
|---|---|---|
| .. | ||
| apt-get-update | ||
| apt-get-update-sanity-test | ||
| askpass | ||
| disable-kernel-module-loading | ||
| echo-path | ||
| hide-hardware-info | ||
| mmap-rnd-bits | ||
| pam-abort-on-locked-password | ||
| pam-info | ||
| pam_faillock_not_if_x | ||
| pam_only_if_login | ||
| pam_only_if_su | ||
| panic-on-oops | ||
| permission-lockdown | ||
| remove-system.map | ||
| virusforget | ||