summaryrefslogtreecommitdiff
path: root/ssh-keysign.c
diff options
context:
space:
mode:
authordtucker@openbsd.org <dtucker@openbsd.org>2018-07-27 05:34:42 +0000
committerDamien Miller <djm@mindrot.org>2018-07-31 12:20:13 +1000
commite655ee04a3cb7999dbf9641b25192353e2b69418 (patch)
treeec31b0a5b5011db7848a40f8ae9de8d5aa1a5334 /ssh-keysign.c
parent73ddb25bae4c33a0db361ac13f2e3a60d7c6c4a5 (diff)
upstream: Now that ssh can't be setuid, remove the
original_real_uid and original_effective_uid globals and replace with calls to plain getuid(). ok djm@ OpenBSD-Commit-ID: 92561c0cd418d34e6841e20ba09160583e27b68c
Diffstat (limited to 'ssh-keysign.c')
-rw-r--r--ssh-keysign.c10
1 files changed, 2 insertions, 8 deletions
diff --git a/ssh-keysign.c b/ssh-keysign.c
index 78bb66b08..744ecb4f9 100644
--- a/ssh-keysign.c
+++ b/ssh-keysign.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssh-keysign.c,v 1.54 2018/02/23 15:58:38 markus Exp $ */ 1/* $OpenBSD: ssh-keysign.c,v 1.55 2018/07/27 05:34:42 dtucker Exp $ */
2/* 2/*
3 * Copyright (c) 2002 Markus Friedl. All rights reserved. 3 * Copyright (c) 2002 Markus Friedl. All rights reserved.
4 * 4 *
@@ -62,11 +62,6 @@ struct ssh *active_state = NULL; /* XXX needed for linking */
62 62
63extern char *__progname; 63extern char *__progname;
64 64
65/* XXX readconf.c needs these */
66uid_t original_real_uid;
67
68extern char *__progname;
69
70static int 65static int
71valid_request(struct passwd *pw, char *host, struct sshkey **ret, 66valid_request(struct passwd *pw, char *host, struct sshkey **ret,
72 u_char *data, size_t datalen) 67 u_char *data, size_t datalen)
@@ -201,8 +196,7 @@ main(int argc, char **argv)
201 key_fd[i++] = open(_PATH_HOST_XMSS_KEY_FILE, O_RDONLY); 196 key_fd[i++] = open(_PATH_HOST_XMSS_KEY_FILE, O_RDONLY);
202 key_fd[i++] = open(_PATH_HOST_RSA_KEY_FILE, O_RDONLY); 197 key_fd[i++] = open(_PATH_HOST_RSA_KEY_FILE, O_RDONLY);
203 198
204 original_real_uid = getuid(); /* XXX readconf.c needs this */ 199 if ((pw = getpwuid(getuid())) == NULL)
205 if ((pw = getpwuid(original_real_uid)) == NULL)
206 fatal("getpwuid failed"); 200 fatal("getpwuid failed");
207 pw = pwcopy(pw); 201 pw = pwcopy(pw);
208 202