- (dtucker) [session.c] Bug #789: Do not call do_pam_setcred as a non-root

user, since some modules might fail due to lack of privilege.  ok djm@
This commit is contained in:
Darren Tucker 2004-02-06 15:30:50 +11:00
parent 6977fe742b
commit ef3a4a208c
2 changed files with 5 additions and 2 deletions

View File

@ -2,6 +2,8 @@
- (dtucker) [acss.c acss.h] Fix $Id tags. - (dtucker) [acss.c acss.h] Fix $Id tags.
- (dtucker) [cipher-acss.c cipher.c] Enable acss only if building with - (dtucker) [cipher-acss.c cipher.c] Enable acss only if building with
OpenSSL >= 0.9.7. ok djm@ OpenSSL >= 0.9.7. ok djm@
- (dtucker) [session.c] Bug #789: Do not call do_pam_setcred as a non-root
user, since some modules might fail due to lack of privilege. ok djm@
20040129 20040129
- (dtucker) OpenBSD CVS Sync regress/ - (dtucker) OpenBSD CVS Sync regress/
@ -1787,4 +1789,4 @@
- Fix sshd BindAddress and -b options for systems using fake-getaddrinfo. - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
Report from murple@murple.net, diagnosis from dtucker@zip.com.au Report from murple@murple.net, diagnosis from dtucker@zip.com.au
$Id: ChangeLog,v 1.3206 2004/02/06 04:26:10 dtucker Exp $ $Id: ChangeLog,v 1.3207 2004/02/06 04:30:50 dtucker Exp $

View File

@ -519,6 +519,7 @@ do_exec_pty(Session *s, const char *command)
#if defined(USE_PAM) #if defined(USE_PAM)
if (options.use_pam) { if (options.use_pam) {
do_pam_set_tty(s->tty); do_pam_set_tty(s->tty);
if (!use_privsep)
do_pam_setcred(1); do_pam_setcred(1);
} }
#endif #endif