d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Switch to user UID/GID before checking/reading its ~/.login_conf

Browse Source 
- some NFSes have root read access disabled
This commit is contained in:
ache 1999-04-24 17:01:58 +00:00
parent aa44c9bb33
commit b0558c3afe
1 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
lib/libutil/login_cap.c
View File

@ -25,7 +25,7 @@
*
* Low-level routines relating to the user capabilities database
*
* $Id: login_cap.c,v 1.13 1997/05/11 08:07:29 davidn Exp $
* $Id: login_cap.c,v 1.14 1997/06/13 22:26:41 davidn Exp $
*/
#include <stdio.h>
@ -184,12 +184,21 @@ login_getclassbyname(char const *name, const struct passwd *pwd)
if ((lc = malloc(sizeof(login_cap_t))) != NULL) {
int r, i = 0;
uid_t euid;
gid_t egid;
const char *msg = NULL;
const char *dir = (pwd == NULL) ? NULL : pwd->pw_dir;
char userpath[MAXPATHLEN];
static char *login_dbarray[] = { NULL, NULL, NULL };
/* Switch to user mode before checking/reading its ~/.login_conf */
/* - some NFSes have root read access disabled. */
euid = geteuid();
egid = getegid();
(void)setegid(pwd->pw_gid);
(void)seteuid(pwd->pw_uid);
if (dir && snprintf(userpath, MAXPATHLEN, "%s/%s", dir,
_FILE_LOGIN_CONF) < MAXPATHLEN) {
login_dbarray[i] = userpath;
@ -229,6 +238,8 @@ login_getclassbyname(char const *name, const struct passwd *pwd)
/* Fallthru - just return system defaults */
case 0: /* success! */
if ((lc->lc_class = strdup(name)) != NULL) {
(void)seteuid(euid);
(void)setegid(egid);
++lc_object_count;
return lc;
}
@ -247,6 +258,8 @@ login_getclassbyname(char const *name, const struct passwd *pwd)
msg = "%s: unexpected cgetent() error '%s': %m";
break;
}
(void)seteuid(euid);
(void)setegid(egid);
if (msg != NULL)
syslog(LOG_ERR, msg, "login_getclass", name);
free(lc);