aboutsummaryrefslogtreecommitdiff
path: root/swaylock/shadow.c
AgeCommit message (Collapse)Author
2018-10-06Fix swaylock w/shadow on glibc, improve securityDrew DeVault
Today I learned that GNU flaunts the POSIX standard in yet another creative way. Additionally, this adds some security improvements, namely: - Zeroing out password buffers in the privileged child process - setuid/setgid after reading /etc/shadow
2018-09-28Add support for building swaylock without PAMDrew DeVault
This involves setuid'ing swaylock, which then forks and drops perms on the parent process. The child process remains root and listens on a pipe for requests to validate passwords against /etc/shadow.