Attachment 446 Details for Bug 701 – Allows only 'publickey' method when 'PermitRootLogin' is set to 'without-password'

[patch] Allows only 'publickey' method when 'PermitRootLogin' is set to 'without-password'

ossh-auth.c.patch (text/plain), 1.29 KB, created by Jim Hranicky on 2003-09-22 23:10:27 AEST

(hide)

Description:

Filename:

MIME Type:

Creator: Jim Hranicky

Created: 2003-09-22 23:10:27 AEST

Size: 1.29 KB

patch

obsolete

>*** auth.c.orig	Tue Sep  2 17:32:46 2003
>--- auth.c	Mon Sep 22 07:38:53 2003
>***************
>*** 310,322 ****
>  int
>  auth_root_allowed(char *method)
>  {
>  	switch (options.permit_root_login) {
>  	case PERMIT_YES:
>  		return 1;
>  		break;
>  	case PERMIT_NO_PASSWD:
>! 		if (strcmp(method, "password") != 0)
>! 			return 1;
>  		break;
>  	case PERMIT_FORCED_ONLY:
>  		if (forced_command) {
>--- 310,338 ----
>  int
>  auth_root_allowed(char *method)
>  {
>+         int i;
>+         int root_allowed = 0;
>+ 
>+         char *root_without_pw_methods[] = {
>+             "publickey",
>+             NULL
>+         };
>+ 
>  	switch (options.permit_root_login) {
>  	case PERMIT_YES:
>  		return 1;
>  		break;
>  	case PERMIT_NO_PASSWD:
>!                 for (i = 0; root_without_pw_methods[i] != NULL; i++) 
>!                     if (strncmp(method, root_without_pw_methods[i], strlen(root_without_pw_methods[i])) == 0) { 
>!                         debug2("Method %s allowed for root without password", method);
>!                         root_allowed = 1;
>!                     } else {
>!                         debug2("Method %s denied for root without password", method);
>!                     }
>! 
>!                 if (root_allowed)
>!                     return 1;
>  		break;
>  	case PERMIT_FORCED_ONLY:
>  		if (forced_command) {

Actions: View | Diff

Attachments on bug 701: 446