Affected by GO-2020-0027 and 2 other vulnerabilities

GO-2020-0027: Privilege escalation in github.com/google/fscrypt

GO-2022-0339: Possible filesystem space exhaustion by local users in github.com/google/fscrypt

GO-2022-0340: User login denial of service in github.com/google/fscrypt

pam

package

v0.1.0 Latest Latest Go to latest Published: Jun 28, 2017 License: Apache-2.0 Imports: 7 Imported by: 6

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/google/fscrypt

Links

Open Source Insights

Documentation ¶

Overview ¶

Package pam contains all the functionality for interfacing with Linux Pluggable Authentication Modules (PAM). Currently, all this package does is check the validity of a user's login passphrase. See http://www.linux-pam.org/Linux-PAM-html/ for more information.

Index ¶

Variables
func IsUserLoginToken(username string, token *crypto.Key) (_ bool, err error)

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrPamInternal = util.SystemError("internal pam error")
)

Global state is needed for the PAM callback, so we guard this function with a lock. tokenToCheck is only ever non-nil when loginLock is held.

Functions ¶

func IsUserLoginToken ¶

func IsUserLoginToken(username string, token *crypto.Key) (_ bool, err error)

IsUserLoginToken returns true if the presented token is the user's login key, false if it is not their login key, and an error if this cannot be determined. Note that unless the currently running process is root, this check will only work for the user running this process.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

pam