o Modify NFS rights comment to note that the early credential changes

to test for a home directory don't set up the additional groups, and
  as such may limit users conservatively.  This does not affect the
  eventual credentials selected.
This commit is contained in:
rwatson 2001-09-15 17:09:39 +00:00
parent c9e6468209
commit fabafaba5e

View File

@ -394,7 +394,13 @@ main(argc, argv)
lc = login_getpwclass(pwd);
quietlog = login_getcapbool(lc, "hushlogin", 0);
/* Switching needed for NFS with root access disabled */
/*
* Switching needed for NFS with root access disabled.
*
* XXX: This change fails to modify the additional groups for the
* process, and as such, may restrict rights normally granted
* through those groups.
*/
(void)setegid(pwd->pw_gid);
(void)seteuid(rootlogin ? 0 : pwd->pw_uid);
if (!*pwd->pw_dir || chdir(pwd->pw_dir) < 0) {