hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-11-17 16:10:46 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Plug security hole that was already fixed in 1.1. It prevents

Browse Source 
user from specifying their hostname when rlogin()-ing in
(using rlogin -f-h<host>)

Reviewed by:
Submitted by:
This commit is contained in:
Guido van Rooij 1994-08-15 19:44:50 +00:00
parent d966229d00
commit 9496903032
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=2076
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
libexec/rlogind/rlogind.c
View File

@ -293,6 +293,11 @@ doit(f, fromp)
if (f > 2) /* f should always be 0, but... */
(void) close(f);
setup_term(0);
if (strchr(lusername, '-')) {
syslog(LOG_ERR, "tried to pass user \"%s\" to login",
lusername);
fatal(STDERR_FILENO, "invalid user", 0);
}
if (authenticated) {
#ifdef KERBEROS
if (use_kerberos && (pwd->pw_uid == 0))