-
Notifications
You must be signed in to change notification settings - Fork 251
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CLIENT:PAM: replace deprecated _pam_overwrite
#7615
CLIENT:PAM: replace deprecated _pam_overwrite
#7615
Conversation
src/sss_client/pam_sss.c
Outdated
@@ -50,6 +50,8 @@ | |||
#include "util/authtok-utils.h" | |||
#include "util/dlinklist.h" | |||
|
|||
void sss_erase_mem_securely(void *p, size_t size); /* from memory_erase.c */ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This function is declared in the util.h
header file. Redeclaring it here is not a good idea.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
sss_client code doesn't include 'util.h' (for a reason - to not pull any dependencies like 'talloc' etc)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I do not have strong opinion on this, but what about moving the declaration to memory_erase.h
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I can add it if you'd like but I personally don't like adding headers for the sake of one function declaration.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I like Tomas' idea. This new header file can be included from util.h
so that no other change is required, and included directly from the C files that use only this function. But do it as you feel it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok, added a new header.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ACK, thanks
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ACK.
Thanks.
c91508b
to
f115bde
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Awesome. Thank you.
distcheck fails:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
NACK - distcheck fails with this change
f115bde
to
40c74d8
Compare
Fixed. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ACK, thanks
@aplopez, do you want a second look? |
LGTM. |
with
sss_erase_mem_securely()
And revert ef014b8.