diff options
author | Darren Tucker <dtucker@zip.com.au> | 2004-02-06 15:30:50 +1100 |
---|---|---|
committer | Darren Tucker <dtucker@zip.com.au> | 2004-02-06 15:30:50 +1100 |
commit | ef3a4a208c4bd711f7c4131e3bb293313652450d (patch) | |
tree | f581ce49a1d74f5038c431eb37aa6db8aa20ecf1 | |
parent | 6977fe742b363b84822afd45c9b2ef36f16e0ae3 (diff) |
- (dtucker) [session.c] Bug #789: Do not call do_pam_setcred as a non-root
user, since some modules might fail due to lack of privilege. ok djm@
-rw-r--r-- | ChangeLog | 4 | ||||
-rw-r--r-- | session.c | 3 |
2 files changed, 5 insertions, 2 deletions
@@ -2,6 +2,8 @@ | |||
2 | - (dtucker) [acss.c acss.h] Fix $Id tags. | 2 | - (dtucker) [acss.c acss.h] Fix $Id tags. |
3 | - (dtucker) [cipher-acss.c cipher.c] Enable acss only if building with | 3 | - (dtucker) [cipher-acss.c cipher.c] Enable acss only if building with |
4 | OpenSSL >= 0.9.7. ok djm@ | 4 | OpenSSL >= 0.9.7. ok djm@ |
5 | - (dtucker) [session.c] Bug #789: Do not call do_pam_setcred as a non-root | ||
6 | user, since some modules might fail due to lack of privilege. ok djm@ | ||
5 | 7 | ||
6 | 20040129 | 8 | 20040129 |
7 | - (dtucker) OpenBSD CVS Sync regress/ | 9 | - (dtucker) OpenBSD CVS Sync regress/ |
@@ -1787,4 +1789,4 @@ | |||
1787 | - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo. | 1789 | - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo. |
1788 | Report from murple@murple.net, diagnosis from dtucker@zip.com.au | 1790 | Report from murple@murple.net, diagnosis from dtucker@zip.com.au |
1789 | 1791 | ||
1790 | $Id: ChangeLog,v 1.3206 2004/02/06 04:26:10 dtucker Exp $ | 1792 | $Id: ChangeLog,v 1.3207 2004/02/06 04:30:50 dtucker Exp $ |
@@ -519,7 +519,8 @@ do_exec_pty(Session *s, const char *command) | |||
519 | #if defined(USE_PAM) | 519 | #if defined(USE_PAM) |
520 | if (options.use_pam) { | 520 | if (options.use_pam) { |
521 | do_pam_set_tty(s->tty); | 521 | do_pam_set_tty(s->tty); |
522 | do_pam_setcred(1); | 522 | if (!use_privsep) |
523 | do_pam_setcred(1); | ||
523 | } | 524 | } |
524 | #endif | 525 | #endif |
525 | 526 | ||