Subject: Re: PR11150 on login_getclass()
To: enami tsugutomo <enami@sm.sony.co.jp>
From: Martin J. Laubach <mjl@emsi.priv.at>
List: tech-userlevel
Date: 10/11/2000 11:16:22
| > for (res = 0; classfiles[res]; ++res)
| > if (secure_path(classfiles[res]) < 0)
| > - return (0);
| > + if ( errno != ENOENT )
| > + return (0);
|
| Since the secure_path(3) man page doesn't mention about errno, we
| shouldn't rely on it. We should do l?stat(2) by hand unless we change
| the spec. of secure_path(3).
As I mentioned in private mail, the above doesn't look all too good
as solution. Something along OpenBSD's fix is much better I think.
While at it, you could nuke that classfiles vector, since we only
support one config file anyway.
mjl