Package: src:pam
Version: 1.1.1-6.1
Severity: normal

According to pam_syslog(3), both of pam_syslog() and
pam_vsyslog() are to accept a priority parameter
composed from severity _and_ from facility. However,
the source code contains

    /* libpam/pam_syslog.c, line 99 */

    syslog (LOG_AUTHPRIV | priority, "%s %s", ...);

Including a facility in PRIORITY, differing from LOG_AUTHPRIV,
will thus send two facility tags to syslog(), which in the
implementation of libc6 is unpredictable at best since it
applies neither alternatives correctly. A remedy would be
to use an inline test:

    syslog ((priority & ~LOG_PRIMASK) ? priority : LOG_AUTHPRIV|priority, ...);

Another solution would be to rewrite the manual page!

Regards,
  Mats Erik Andersson, DM


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to