From 88e341e1ca9502403242a275941b11e509f669fb Mon Sep 17 00:00:00 2001
From: Damien Miller <djm@mindrot.org>
Date: Wed, 24 Nov 2010 10:36:15 +1100
Subject:  - (djm) [loginrec.c] Relax permission requirement on btmp logs to
 allow    group read/write. ok dtucker@

---
 loginrec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'loginrec.c')

diff --git a/loginrec.c b/loginrec.c
index 95f14c46f..cccaa47ae 100644
--- a/loginrec.c
+++ b/loginrec.c
@@ -1673,7 +1673,7 @@ record_failed_login(const char *username, const char *hostname,
 		    strerror(errno));
 		goto out;
 	}
-	if((fst.st_mode & (S_IRWXG | S_IRWXO)) || (fst.st_uid != 0)){
+	if((fst.st_mode & (S_IXGRP | S_IRWXO)) || (fst.st_uid != 0)){
 		logit("Excess permission or bad ownership on file %s",
 		    _PATH_BTMP);
 		goto out;
-- 
cgit v1.2.3