1 files changed, 7 insertions, 0 deletions
diff --git a/usr.bin/su/su.c b/usr.bin/su/su.c
index df7165b8c823e..b3eb587dfecb7 100644
--- a/usr.bin/su/su.c
+++ b/usr.bin/su/su.c
@@ -214,6 +214,13 @@ main(argc, argv)
 			}
 #endif /* WHEELSU */
 		}
+		if (pwd->pw_expire && time(NULL) >= pwd->pw_expire) {
+			fprintf(stderr, "Sorry - account expired\n");
+			syslog(LOG_AUTH|LOG_WARNING,
+				"BAD SU %s to %s%s", username,
+				user, ontty());
+			exit(1);
+		}
 	    }
 	}