From bb12416da1f6e58bda1762eca956b5c61f36d180 Mon Sep 17 00:00:00 2001
From: Ray Strode <rstrode@redhat.com>
Date: Tue, 30 Aug 2016 16:10:19 -0400
Subject: pam_gdm: return AUTHINFO_UNAVAIL if kernel keyring unavailable

right now we return PAM_SUCCESS if keyutils are unavailable.
This is the wrong default, we should fail if we aren't able to
get the password.

https://bugzilla.gnome.org/show_bug.cgi?id=770612
---
 pam_gdm/pam_gdm.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pam_gdm/pam_gdm.c b/pam_gdm/pam_gdm.c
index 7beb04e7..f491b8d8 100644
--- a/pam_gdm/pam_gdm.c
+++ b/pam_gdm/pam_gdm.c
@@ -58,7 +58,7 @@ pam_sm_authenticate (pam_handle_t  *pamh,
                 return PAM_AUTH_ERR;
 #endif
 
-        return PAM_SUCCESS;
+        return PAM_AUTHINFO_UNAVAIL;
 }
 
 int
-- 
cgit v1.2.1