kravietz / pam_tacplus

TACACS+ protocol client library and PAM module in C. This PAM module support authentication, authorization (account management) and accounting (session management)performed using TACACS+ protocol designed by Cisco.
GNU Lesser General Public License v3.0
132 stars 102 forks source link

pam: don't leak TACACS+ secret to journald #150

Closed gollub closed 4 years ago

gollub commented 4 years ago

If journald for syslog is used, the journal is going to store everything, even DEBUG loglevel messages. Pre-journald logging of system-wide DEBUG loglevel could be avoided and is not affected in all cases.

With journald presence it's probably safe to no longer log sensitive details at DEBUG level.

Fix #149

Signed-off-by: Daniel Gollub dgollub@att.com