o Modify NFS rights comment to note that the early credential changes
to test for a home directory don't set up the additional groups, and as such may limit users conservatively. This does not affect the eventual credentials selected.
This commit is contained in:
parent
c9e6468209
commit
fabafaba5e
@ -394,7 +394,13 @@ main(argc, argv)
|
||||
lc = login_getpwclass(pwd);
|
||||
|
||||
quietlog = login_getcapbool(lc, "hushlogin", 0);
|
||||
/* Switching needed for NFS with root access disabled */
|
||||
/*
|
||||
* Switching needed for NFS with root access disabled.
|
||||
*
|
||||
* XXX: This change fails to modify the additional groups for the
|
||||
* process, and as such, may restrict rights normally granted
|
||||
* through those groups.
|
||||
*/
|
||||
(void)setegid(pwd->pw_gid);
|
||||
(void)seteuid(rootlogin ? 0 : pwd->pw_uid);
|
||||
if (!*pwd->pw_dir || chdir(pwd->pw_dir) < 0) {
|
||||
|
Loading…
Reference in New Issue
Block a user