Bugzilla – Attachment 2034 Details for
Bug 1891
selinux policy does not like to exec passwd from sshd directly
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
The new patch
openssh-5.8p1-pwchange.patch (text/plain), 841 bytes, created by
jchadima
on 2011-04-21 06:34:31 AEST
(
hide
)
Description:
The new patch
Filename:
MIME Type:
Creator:
jchadima
Created:
2011-04-21 06:34:31 AEST
Size:
841 bytes
patch
obsolete
>diff -up openssh-5.8p1/session.c.pwchange openssh-5.8p1/session.c >--- openssh-5.8p1/session.c.pwchange 2011-04-20 10:46:50.144658782 +0200 >+++ openssh-5.8p1/session.c 2011-04-20 11:36:09.055648048 +0200 >@@ -1542,11 +1542,27 @@ do_setusercontext(struct passwd *pw) > static void > do_pwchange(Session *s) > { >+#ifdef WITH_SELINUX >+ pid_t pid; >+#endif >+ > fflush(NULL); > fprintf(stderr, "WARNING: Your password has expired.\n"); > if (s->ttyfd != -1) { > fprintf(stderr, > "You must change your password now and login again!\n"); >+#ifdef WITH_SELINUX >+ switch (pid = fork()) { >+ case -1: >+ fatal("cannot fork"); >+ case 0: >+ setexeccon(NULL); >+ break; >+ default: >+ waitpid(pid, NULL, 0); >+ exit(0); >+ } >+#endif > #ifdef PASSWD_NEEDS_USERNAME > execl(_PATH_PASSWD_PROG, "passwd", s->pw->pw_name, > (char *)NULL);
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=2034">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 1891
:
2030
| 2034 |
2039