diff options
| author | rgirada <rgirada@vmware.com> | 2022-06-23 16:37:28 +0200 |
|---|---|---|
| committer | rgirada <rgirada@vmware.com> | 2022-06-23 20:15:47 +0200 |
| commit | 264a2a273fd1bf6543cef6bccf9019d09249b1a1 (patch) | |
| tree | a6051e3187cff5950631ff68c3a1fb2040f0cfb6 /zebra/ipforward.h | |
| parent | Merge pull request #11453 from ribarroetavena/master (diff) | |
| download | frr-264a2a273fd1bf6543cef6bccf9019d09249b1a1.tar.xz frr-264a2a273fd1bf6543cef6bccf9019d09249b1a1.zip | |
vtysh: Account validity should be verified when authenticating users with PAM.
Description:
SonarQube detects the following behaviour as a vulanarability.
When authenticating users using PAM, it is strongly recommended to
check the validity of the account (not locked, not expired ...),
otherwise it leads to unauthorized access to resources.
pam_acct_mgmt() should be called for account validity after
calling pam_authenticate().
Signed-off-by: Rajesh Girada <rgirada@vmware.com>
Diffstat (limited to 'zebra/ipforward.h')
0 files changed, 0 insertions, 0 deletions