- markus@cvs.openbsd.org 2006/06/06 10:20:20

     [readpass.c sshconnect.c sshconnect.h sshconnect2.c uidswap.c]
     replace remaining setuid() calls with permanently_set_uid() and
     check seteuid() return values; report Marcus Meissner; ok dtucker djm

1 files changed, 2 insertions, 3 deletions

diff --git a/sshconnect.c b/sshconnect.c
index e855f1926..41ad82f9f 100644
--- a/sshconnect.c
+++ b/sshconnect.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sshconnect.c,v 1.182 2006/05/17 12:43:34 markus Exp $ */
+/* $OpenBSD: sshconnect.c,v 1.183 2006/06/06 10:20:20 markus Exp $ */
 /*
  * Author: Tatu Ylonen <ylo@cs.hut.fi>
  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -97,8 +97,7 @@ ssh_proxy_connect(const char *host, u_short port, const char *proxy_command)
                 char *argv[10];
 
                 /* Child.  Permanently give up superuser privileges. */
-                seteuid(original_real_uid);
-                setuid(original_real_uid);
+                permanently_set_uid(getpwuid(original_real_uid));
 
                 /* Redirect stdin and stdout. */
                 close(pin[1]);