summaryrefslogtreecommitdiff
path: root/auth-rhosts.c
diff options
context:
space:
mode:
Diffstat (limited to 'auth-rhosts.c')
-rw-r--r--auth-rhosts.c6
1 files changed, 2 insertions, 4 deletions
diff --git a/auth-rhosts.c b/auth-rhosts.c
index 0ef344712..c17c13cc1 100644
--- a/auth-rhosts.c
+++ b/auth-rhosts.c
@@ -273,8 +273,7 @@ auth_rhosts2_raw(struct passwd *pw, const char *client_user, const char *hostnam
273 return 0; 273 return 0;
274 } 274 }
275 if (options.strict_modes && 275 if (options.strict_modes &&
276 ((st.st_uid != 0 && st.st_uid != pw->pw_uid) || 276 !secure_permissions(&st, pw->pw_uid)) {
277 (st.st_mode & 022) != 0)) {
278 logit("Rhosts authentication refused for %.100s: " 277 logit("Rhosts authentication refused for %.100s: "
279 "bad ownership or modes for home directory.", pw->pw_name); 278 "bad ownership or modes for home directory.", pw->pw_name);
280 auth_debug_add("Rhosts authentication refused for %.100s: " 279 auth_debug_add("Rhosts authentication refused for %.100s: "
@@ -300,8 +299,7 @@ auth_rhosts2_raw(struct passwd *pw, const char *client_user, const char *hostnam
300 * allowing access to their account by anyone. 299 * allowing access to their account by anyone.
301 */ 300 */
302 if (options.strict_modes && 301 if (options.strict_modes &&
303 ((st.st_uid != 0 && st.st_uid != pw->pw_uid) || 302 !secure_permissions(&st, pw->pw_uid)) {
304 (st.st_mode & 022) != 0)) {
305 logit("Rhosts authentication refused for %.100s: bad modes for %.200s", 303 logit("Rhosts authentication refused for %.100s: bad modes for %.200s",
306 pw->pw_name, buf); 304 pw->pw_name, buf);
307 auth_debug_add("Bad file modes for %.200s", buf); 305 auth_debug_add("Bad file modes for %.200s", buf);