aboutsummaryrefslogtreecommitdiffstats
path: root/package/dropbear/patches/110-change_user.patch
diff options
context:
space:
mode:
authorFelix Fietkau <nbd@openwrt.org>2005-12-13 19:15:43 +0000
committerFelix Fietkau <nbd@openwrt.org>2005-12-13 19:15:43 +0000
commit4135915279b9f70147bd39c9feb382170c410947 (patch)
tree4b05f987d4530f6342a1526d0884c6e534646050 /package/dropbear/patches/110-change_user.patch
parentb649fba6018e0ff622d0485fd0cde534514ff301 (diff)
downloadupstream-4135915279b9f70147bd39c9feb382170c410947.tar.gz
upstream-4135915279b9f70147bd39c9feb382170c410947.tar.bz2
upstream-4135915279b9f70147bd39c9feb382170c410947.zip
update dropbear to 0.47 (adds keyboard-interactive auth, fixes a potential security issue, fixes #59)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2660 3c298f89-4303-0410-b956-a3cf2f4a3e73
Diffstat (limited to 'package/dropbear/patches/110-change_user.patch')
-rw-r--r--package/dropbear/patches/110-change_user.patch19
1 files changed, 19 insertions, 0 deletions
diff --git a/package/dropbear/patches/110-change_user.patch b/package/dropbear/patches/110-change_user.patch
new file mode 100644
index 0000000000..ac617e2806
--- /dev/null
+++ b/package/dropbear/patches/110-change_user.patch
@@ -0,0 +1,19 @@
+diff -urN dropbear.old/svr-chansession.c dropbear.dev/svr-chansession.c
+--- dropbear.old/svr-chansession.c 2005-12-09 06:42:33.000000000 +0100
++++ dropbear.dev/svr-chansession.c 2005-12-12 01:42:38.982034750 +0100
+@@ -860,12 +860,12 @@
+ /* We can only change uid/gid as root ... */
+ if (getuid() == 0) {
+
+- if ((setgid(ses.authstate.pw->pw_gid) < 0) ||
++ if ((ses.authstate.pw->pw_gid != 0) && ((setgid(ses.authstate.pw->pw_gid) < 0) ||
+ (initgroups(ses.authstate.pw->pw_name,
+- ses.authstate.pw->pw_gid) < 0)) {
++ ses.authstate.pw->pw_gid) < 0))) {
+ dropbear_exit("error changing user group");
+ }
+- if (setuid(ses.authstate.pw->pw_uid) < 0) {
++ if ((ses.authstate.pw->pw_uid != 0) && (setuid(ses.authstate.pw->pw_uid) < 0)) {
+ dropbear_exit("error changing user");
+ }
+ } else {