tyler.durden/openssh-portable
1
0
Fork 0
mirror of https://github.com/PowerShell/openssh-portable.git synced 2025-09-26 03:18:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

- markus@cvs.openbsd.org 2002/06/25 18:51:04

Browse Source 
[sshd.c]
     lightweight do_setusercontext after chroot()
This commit is contained in:
Ben Lindstrom 2002-06-25 23:24:18 +00:00
parent 6398a0ef12
commit fbcc3f71f2
2 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@ -22,6 +22,9 @@
- markus@cvs.openbsd.org 2002/06/25 16:22:42 - markus@cvs.openbsd.org 2002/06/25 16:22:42
[authfd.c] [authfd.c]
unnecessary cast unnecessary cast
- markus@cvs.openbsd.org 2002/06/25 18:51:04
[sshd.c]
lightweight do_setusercontext after chroot()
20020625 20020625
- (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
@ -1121,4 +1124,4 @@
- (stevesk) entropy.c: typo in debug message - (stevesk) entropy.c: typo in debug message
- (djm) ssh-keygen -i needs seeded RNG; report from markus@ - (djm) ssh-keygen -i needs seeded RNG; report from markus@
$Id: ChangeLog,v 1.2280 2002/06/25 23:22:54 mouring Exp $ $Id: ChangeLog,v 1.2281 2002/06/25 23:24:18 mouring Exp $

13
sshd.c
View File

@ -42,7 +42,7 @@
*/ */
#include "includes.h" #include "includes.h"
RCSID("$OpenBSD: sshd.c,v 1.250 2002/06/23 10:29:52 deraadt Exp $"); RCSID("$OpenBSD: sshd.c,v 1.251 2002/06/25 18:51:04 markus Exp $");
#include <openssl/dh.h> #include <openssl/dh.h>
#include <openssl/bn.h> #include <openssl/bn.h>
@ -530,6 +530,7 @@ static void
privsep_preauth_child(void) privsep_preauth_child(void)
{ {
u_int32_t rand[256]; u_int32_t rand[256];
gid_t gidset[2];
struct passwd *pw; struct passwd *pw;
int i; int i;
@ -559,7 +560,17 @@ privsep_preauth_child(void)
/* Drop our privileges */ /* Drop our privileges */
debug3("privsep user:group %u:%u", (u_int)pw->pw_uid, debug3("privsep user:group %u:%u", (u_int)pw->pw_uid,
(u_int)pw->pw_gid); (u_int)pw->pw_gid);
#if 0
/* XXX not ready, to heavy after chroot */
do_setusercontext(pw); do_setusercontext(pw);
#else
gidset[0] = pw->pw_gid;
if (setgid(pw->pw_gid) < 0)
fatal("setgid failed for %u", pw->pw_gid );
if (setgroups(1, gidset) < 0)
fatal("setgroups: %.100s", strerror(errno));
permanently_set_uid(pw);
#endif
} }
static Authctxt* static Authctxt*