diff options
| author |   tedu <tedu@openbsd.org> | 2016-05-07 21:52:29 +0000 |
|---|---|---|
| committer | tedu <tedu@openbsd.org> | 2016-05-07 21:52:29 +0000 |
| commit | e6f07138279ea5ce3ed5957ad782b6f7e1dcf187 (patch) | |
| tree | cc28c5f80827aed17fa898df60e7430c47344344 /lib/libc | |
| parent | Move the set_tcb after getdents to keep L_cerr in range. (diff) | |
| download | wireguard-openbsd-e6f07138279ea5ce3ed5957ad782b6f7e1dcf187.tar.xz wireguard-openbsd-e6f07138279ea5ce3ed5957ad782b6f7e1dcf187.zip | |
stop opening the shadow database by default. only programs that request it
via the _shadow functions will open now, preventing some programs running
as root from accidentally loading password hashes it into their memory.
ok deraadt
Diffstat (limited to 'lib/libc')
| -rw-r--r-- | lib/libc/gen/getpwent.c | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/lib/libc/gen/getpwent.c b/lib/libc/gen/getpwent.c index cfd0d2e4f98..453e82d9169 100644 --- a/lib/libc/gen/getpwent.c +++ b/lib/libc/gen/getpwent.c @@ -1,4 +1,4 @@ -/* $OpenBSD: getpwent.c,v 1.60 2015/12/28 22:08:18 mmcc Exp $ */ +/* $OpenBSD: getpwent.c,v 1.61 2016/05/07 21:52:29 tedu Exp $ */ /* * Copyright (c) 2008 Theo de Raadt * Copyright (c) 1988, 1993 @@ -743,8 +743,7 @@ int getpwnam_r(const char *name, struct passwd *pw, char *buf, size_t buflen, struct passwd **pwretp) { - /* XXX shadow should be 0 XXX */ - return getpwnam_internal(name, pw, buf, buflen, pwretp, 1); + return getpwnam_internal(name, pw, buf, buflen, pwretp, 0); } DEF_WEAK(getpwnam_r); @@ -828,8 +827,7 @@ int getpwuid_r(uid_t uid, struct passwd *pw, char *buf, size_t buflen, struct passwd **pwretp) { - /* XXX shadow should be 0 XXX */ - return getpwuid_internal(uid, pw, buf, buflen, pwretp, 1); + return getpwuid_internal(uid, pw, buf, buflen, pwretp, 0); } DEF_WEAK(getpwuid_r); |