tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

- (djm) Clear supplemental groups at sshd start to prevent them from 

being propogated to random PAM modules. Based on patch from Redhat via
   Pekka Savola <pekkas@netcore.fi>
This commit is contained in:
Damien Miller 2001-09-15 21:12:49 +10:00
parent ba6f9f9e49
commit ebf989e601
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@ -5,6 +5,9 @@
Redhat Redhat
- (djm) Redhat initscript config sanity checking from Pekka Savola - (djm) Redhat initscript config sanity checking from Pekka Savola
<pekkas@netcore.fi> <pekkas@netcore.fi>
- (djm) Clear supplemental groups at sshd start to prevent them from
being propogated to random PAM modules. Based on patch from Redhat via
Pekka Savola <pekkas@netcore.fi>
20010914 20010914
- (bal) OpenBSD CVS Sync - (bal) OpenBSD CVS Sync
@ -6436,4 +6439,4 @@
- Wrote replacements for strlcpy and mkdtemp - Wrote replacements for strlcpy and mkdtemp
- Released 1.0pre1 - Released 1.0pre1
$Id: ChangeLog,v 1.1518 2001/09/15 11:03:10 djm Exp $ $Id: ChangeLog,v 1.1519 2001/09/15 11:12:49 djm Exp $

4
sshd.c
View File

@ -782,6 +782,10 @@ main(int ac, char **av)
log_stderr = 1; log_stderr = 1;
log_init(__progname, options.log_level, options.log_facility, log_stderr); log_init(__progname, options.log_level, options.log_facility, log_stderr);
/* Make supp. groups don't get propogated to PAM modules */
if (setgroups(0, NULL) < 0)
fatal("setgroups() failed: %.200s", strerror(errno));
/* /*
* If not in debugging mode, and not started from inetd, disconnect * If not in debugging mode, and not started from inetd, disconnect
* from the controlling terminal, and fork. The original process * from the controlling terminal, and fork. The original process