- (djm) [session.c] FreeBSD needs setusercontext(..., LOGIN_SETUMASK) to

   occur after UID switch; patch from John Marshall via des AT des.no;
   ok dtucker@

1 files changed, 5 insertions, 0 deletions

diff --git a/session.c b/session.c
index 643e7fc59..19eaa20c3 100644
--- a/session.c
+++ b/session.c
@@ -1520,6 +1520,11 @@ do_setusercontext(struct passwd *pw)
                         perror("unable to set user context (setuser)");
                         exit(1);
                 }
+                /* 
+                 * FreeBSD's setusercontext() will not apply the user's
+                 * own umask setting unless running with the user's UID.
+                 */
+                (void) setusercontext(lc, pw, pw->pw_uid, LOGIN_SETUMASK);
 #else
                 /* Permanently switch to the desired uid. */
                 permanently_set_uid(pw);