On Mon, 22 Nov 2010 17:25:38 +0100
Sumit Bose <sbose(a)redhat.com> wrote:
On Mon, Nov 22, 2010 at 09:23:01AM -0500, Simo Sorce wrote:
> On Mon, 22 Nov 2010 10:46:02 +0100
> Sumit Bose <sbose(a)redhat.com> wrote:
>
> > Protecting a whole PAM task like authentication with a mutex can
> > lead to DOS situation when a user logs into a threaded
> > application with his username but "forgets" to enter his password
> > immediately because the phone is ringing.
>
> After discussing this point on IRC, moved the mutex to cover only
> socket communication for the pam client.
>
> New patch attached.
ACK
Pushed to master.
Simo.
--
Simo Sorce * Red Hat, Inc * New York