diff options
author | ache <ache@FreeBSD.org> | 1999-04-24 17:01:58 +0000 |
---|---|---|
committer | ache <ache@FreeBSD.org> | 1999-04-24 17:01:58 +0000 |
commit | 35ed42572623f74e60f7f78aa78d452ac4484bbc (patch) | |
tree | 518610a3326b8116d1662516796ed507626a21ef /lib/libutil | |
parent | e45052d14872d12123bedd0296c1d7277b112f71 (diff) | |
download | FreeBSD-src-35ed42572623f74e60f7f78aa78d452ac4484bbc.zip FreeBSD-src-35ed42572623f74e60f7f78aa78d452ac4484bbc.tar.gz |
Switch to user UID/GID before checking/reading its ~/.login_conf
- some NFSes have root read access disabled
Diffstat (limited to 'lib/libutil')
-rw-r--r-- | lib/libutil/login_cap.c | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/lib/libutil/login_cap.c b/lib/libutil/login_cap.c index 0369907..8fee8dd 100644 --- a/lib/libutil/login_cap.c +++ b/lib/libutil/login_cap.c @@ -25,7 +25,7 @@ * * Low-level routines relating to the user capabilities database * - * $Id: login_cap.c,v 1.13 1997/05/11 08:07:29 davidn Exp $ + * $Id: login_cap.c,v 1.14 1997/06/13 22:26:41 davidn Exp $ */ #include <stdio.h> @@ -184,12 +184,21 @@ login_getclassbyname(char const *name, const struct passwd *pwd) if ((lc = malloc(sizeof(login_cap_t))) != NULL) { int r, i = 0; + uid_t euid; + gid_t egid; const char *msg = NULL; const char *dir = (pwd == NULL) ? NULL : pwd->pw_dir; char userpath[MAXPATHLEN]; static char *login_dbarray[] = { NULL, NULL, NULL }; + /* Switch to user mode before checking/reading its ~/.login_conf */ + /* - some NFSes have root read access disabled. */ + euid = geteuid(); + egid = getegid(); + (void)setegid(pwd->pw_gid); + (void)seteuid(pwd->pw_uid); + if (dir && snprintf(userpath, MAXPATHLEN, "%s/%s", dir, _FILE_LOGIN_CONF) < MAXPATHLEN) { login_dbarray[i] = userpath; @@ -229,6 +238,8 @@ login_getclassbyname(char const *name, const struct passwd *pwd) /* Fallthru - just return system defaults */ case 0: /* success! */ if ((lc->lc_class = strdup(name)) != NULL) { + (void)seteuid(euid); + (void)setegid(egid); ++lc_object_count; return lc; } @@ -247,6 +258,8 @@ login_getclassbyname(char const *name, const struct passwd *pwd) msg = "%s: unexpected cgetent() error '%s': %m"; break; } + (void)seteuid(euid); + (void)setegid(egid); if (msg != NULL) syslog(LOG_ERR, msg, "login_getclass", name); free(lc); |