diff options
author | rwatson <rwatson@FreeBSD.org> | 2002-11-12 22:30:01 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2002-11-12 22:30:01 +0000 |
commit | b942ef4ae606e9dc0541553d6b0b0a3a8033d7e5 (patch) | |
tree | 28ef59c59bdf681c85a8ce7c442e67b58a457581 | |
parent | 3ff77794e7025676d7995c7b3b49693d1caa12d5 (diff) | |
download | FreeBSD-src-b942ef4ae606e9dc0541553d6b0b0a3a8033d7e5.zip FreeBSD-src-b942ef4ae606e9dc0541553d6b0b0a3a8033d7e5.tar.gz |
Add LOGIN_SETMAC to the list of flags that can't be set without class
information, since we rely on the pwd entry to know what MAC labels
to set as part of the login process.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
-rw-r--r-- | lib/libutil/login_class.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/libutil/login_class.c b/lib/libutil/login_class.c index 219db58..d05b2e5 100644 --- a/lib/libutil/login_class.c +++ b/lib/libutil/login_class.c @@ -330,7 +330,7 @@ setusercontext(login_cap_t *lc, const struct passwd *pwd, uid_t uid, unsigned in /* we need a passwd entry to set these */ if (pwd == NULL) - flags &= ~(LOGIN_SETGROUP | LOGIN_SETLOGIN); + flags &= ~(LOGIN_SETGROUP | LOGIN_SETLOGIN | LOGIN_SETMAC); /* Set the process priority */ if (flags & LOGIN_SETPRIORITY) { |