Subject: Re: PR11150 on login_getclass()
To: enami tsugutomo <enami@sm.sony.co.jp>
From: Martin J. Laubach <mjl@emsi.priv.at>
List: tech-userlevel
Date: 10/11/2000 11:16:22
| >         for (res = 0; classfiles[res]; ++res)
| >                 if (secure_path(classfiles[res]) < 0)
| > -                       return (0);
| > +                       if ( errno != ENOENT )
| > +                               return (0);
| 
| Since the secure_path(3) man page doesn't mention about errno, we
| shouldn't rely on it.  We should do l?stat(2) by hand unless we change
| the spec. of secure_path(3).

  As I mentioned in private mail, the above doesn't look all too good
as solution. Something along OpenBSD's fix is much better I think.

  While at it, you could nuke that classfiles vector, since we only
support one config file anyway.

	mjl