isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Store the session ID in the tty ticket file too. A tty may only

Browse Source 
be in one session at a time so if the session ID doesn't match we
ignore the ticket.
This commit is contained in:
Todd C. Miller
2013-02-08 10:43:14 -05:00
parent af0bb55283
commit 2e08777f25
4 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
plugins/sudoers/timestamp.c
View File

@@ -80,13 +80,14 @@ build_timestamp(void)
int len;
debug_decl(build_timestamp, SUDO_DEBUG_AUTH)
/* Stash the tty's ctime for tty ticket comparison. */
/* Stash the tty's device, session ID and ctime for ticket comparison. */
if (def_tty_tickets && user_ttypath && stat(user_ttypath, &sb) == 0) {
tty_info.dev = sb.st_dev;
tty_info.ino = sb.st_ino;
tty_info.rdev = sb.st_rdev;
if (tty_is_devpts(user_ttypath))
ctim_get(&sb, &tty_info.ctime);
tty_info.sid = user_sid;
}
dirparent = def_timestampdir;