2008-04-17  Tomas Mraz <t8m@centrum.cz>

        * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Do not try
        to lock if euid != 0.

--- Linux-PAM-1.0/modules/pam_sepermit/pam_sepermit.c	2008-03-31 12:31:50.000000000 +0200
+++ Linux-PAM/modules/pam_sepermit/pam_sepermit.c	2008-04-17 16:29:02.000000000 +0200
@@ -305,7 +305,7 @@
 	free(line);
 	fclose(f);
 	if (matched) 
-		return exclusive ? sepermit_lock(pamh, user, debug) : 0;
+		return (geteuid() == 0 && exclusive) ? sepermit_lock(pamh, user, debug) : 0;
 	else
 		return -1;
 }