- (dtucker) [configure.ac sshd.c openbsd-compat/bsd-misc.h

   openbsd-compat/setenv.c] Unset KRB5CCNAME on AIX to prevent it from being
   inherited by the child.  ok djm@

1 files changed, 7 insertions, 0 deletions

diff --git a/sshd.c b/sshd.c
index 2c224b9c3..3247091a4 100644
--- a/sshd.c
+++ b/sshd.c
@@ -939,6 +939,13 @@ main(int ac, char **av)
             SYSLOG_FACILITY_AUTH : options.log_facility,
             log_stderr || !inetd_flag);
 
+#ifdef _AIX
+        /*
+         * Unset KRB5CCNAME, otherwise the user's session may inherit it from
+         * root's environment
+         */ 
+        unsetenv("KRB5CCNAME");
+#endif /* _AIX */
 #ifdef _UNICOS
         /* Cray can define user privs drop all prives now!
          * Not needed on PRIV_SU systems!