krb5 commit: Log when non-root ksu authorization fails

[Greg Hudson]

https://github.com/krb5/krb5/commit/6cfa5c113e981f14f70ccafa20abfa5c46b665ba
commit 6cfa5c113e981f14f70ccafa20abfa5c46b665ba
Author: Robbie Harwood <rharwood at redhat.com>
Date:   Mon May 7 16:42:59 2018 -0400

    Log when non-root ksu authorization fails
    
    If non-root user attempts to ksu but is denied by policy, log to
    syslog at LOG_WARNING in keeping with other failure messages.
    
    ticket: 8270

 src/clients/ksu/main.c |   10 ++++++++++
 1 files changed, 10 insertions(+), 0 deletions(-)

diff --git a/src/clients/ksu/main.c b/src/clients/ksu/main.c
index 30f6db7..6fa74a5 100644
--- a/src/clients/ksu/main.c
+++ b/src/clients/ksu/main.c
@@ -414,6 +414,16 @@ main (argc, argv)
     if (hp){
         if (gb_err) fprintf(stderr, "%s", gb_err);
         fprintf(stderr, _("account %s: authorization failed\n"), target_user);
+
+        if (cmd != NULL) {
+            syslog(LOG_WARNING,
+                   "Account %s: authorization for %s for execution of %s failed",
+                   target_user, source_user, cmd);
+        } else {
+            syslog(LOG_WARNING, "Account %s: authorization of %s failed",
+                   target_user, source_user);
+        }
+
         exit(1);
     }