Handle the case where the session limit is already exceeded

vorlonofportland · Apr 11, 2023 · 22ed227 · 22ed227
1 parent b286cd0
commit 22ed227
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pam_session_timelimit.c b/pam_session_timelimit.c
@@ -581,6 +581,9 @@ PAM_EXTERN int pam_sm_acct_mgmt(pam_handle_t *handle,
 		return PAM_PERM_DENIED;
 	}
 
+	if (timeval <= used_time)
+		return PAM_PERM_DENIED;
+
 	timeval -= used_time;
 
 	runtime_max_sec = malloc(FORMAT_TIMESPAN_MAX);