- (dtucker) [session.c] Bug #789: Do not call do_pam_setcred as a non-root

   user, since some modules might fail due to lack of privilege.  ok djm@

1 files changed, 2 insertions, 1 deletions

diff --git a/session.c b/session.c
index 3a6d1a02..02c5dca9 100644
--- a/session.c
+++ b/session.c
@@ -519,7 +519,8 @@ do_exec_pty(Session *s, const char *command)
 #if defined(USE_PAM)
 	if (options.use_pam) {
 		do_pam_set_tty(s->tty);
-		do_pam_setcred(1);
+		if (!use_privsep)
+			do_pam_setcred(1);
 	}
 #endif