Necessary because in order t oresolve the home directory to store the access token,
the try_resolve method would have to be called, which can not resolve using
getpwnam while the PAM module holds the lock to the structure.

Thanks to tnariol!

This reverts commit 169f0d9d.

This reverts commit b5bfa128.

mirabilos authored 3 years ago and Nik | Klampfradler committed 3 years ago

Fixed some inconsistencies in error handling on the way.

Signed-off-by: Dominik George <dominik.george@teckids.org>

Fixed a security issue on the go which would write the user cache file
as root if dropping privileges failed.

This implements privilege dropping to handle files in uer homes.