Source-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: src/usr.sbin/cron



Module Name:    src
Committed By:   christos
Date:           Fri Mar 14 21:56:08 UTC 2003

Modified Files:
        src/usr.sbin/cron: Makefile do_command.c

Log Message:
PR/15142: Kevin P. Neal: cron does not pay attention to login_cap(3)

I simplified the patch addressed certain security concerns. I only
allowed setusercontext() to set resource limits/priority and umask,
because these are the values that are relevant from login.conf. The
rest of the settings (uid/gid/initgroups) should be done using e->uid
and e->gid like they were before, not from:

        struct passwd *pwd = getpwnam(getenv("LOGNAME"));

Finally login_cap's (path/env) are irrelevant in this context since
we want to use our e->envp anyway to execute the command.


To generate a diff of this commit:
cvs rdiff -r1.9 -r1.10 src/usr.sbin/cron/Makefile
cvs rdiff -r1.12 -r1.13 src/usr.sbin/cron/do_command.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




Home | Main Index | Thread Index | Old Index