@@ -1,6 +1,7 @@

 #include <security/pam_appl.h>

 #include <security/pam_modules.h>

 #include <stdio.h>

+#include "logging.h"

 PAM_EXTERN int pam_sm_acct_mgmt(pam_handle_t *pamh, int flags, int argc, const char **argv) {

     printf("Acct mgmt\n");

@@ -9,6 +10,8 @@ PAM_EXTERN int pam_sm_acct_mgmt(pam_handle_t *pamh, int flags, int argc, const c

 PAM_EXTERN int pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc, const char **argv) {

     printf("Authentication\n");

+    log_dual_control();

+

     return PAM_SUCCESS;

 }

@@ -3,6 +3,11 @@

 #include <security/pam_modules.h>

 #include <stdio.h>

+int log_dual_control_invoked = 0;

+void log_dual_control() {

+    log_dual_control_invoked = 1;

+}

+

 int pam_sm_acct_mgmt_returns_successs() {

     // given

@@ -31,6 +36,16 @@ int pam_sm_setcred_returns_success() {

     return result == PAM_SUCCESS;

 }

+int pam_sm_authenticate_invokes_log() {

+    // given

+    log_dual_control_invoked = 0;

+

+    //when

+   pam_sm_authenticate(NULL, 0, 0, NULL);

+   return log_dual_control_invoked;

+}

+

+

 int main(int argc, char* argv[]) {

     int test1_result = pam_sm_acct_mgmt_returns_successs();

     if (!test1_result) {

@@ -47,11 +62,19 @@ int main(int argc, char* argv[]) {

         fprintf(stderr, "set cred failed\n");

     }

+    int test4_result = pam_sm_authenticate_invokes_log();

+    if (!test4_result) {

+        fprintf(stderr, "authenticate invokes log failed\n");

+    }

-    if (test1_result && test2_result && test3_result) {

+    if (test1_result && test2_result && test3_result && test4_result) {

+        fprintf(stderr, "success\n");

         return 0;

     } else {

         return 1;

     }

 }

+

+

+

new file mode 100644

@@ -0,0 +1,8 @@

+#ifndef __DUAL_CONTROL_LOGGING

+#define __DUAL_CONTROL_LOGGING

+

+void log_dual_control();

+

+

+

+#endif