isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Call initgroups() in -U mode so group matches work normally.

Browse Source
This commit is contained in:
Todd C. Miller
2004-11-29 17:52:02 +00:00
parent 51fbe264f1
commit 68e54d2c8b
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
sudo.c
View File

@@ -553,7 +553,7 @@ init_vars(sudo_mode)
/* It is now safe to use log_error() and set_perms() */ /* It is now safe to use log_error() and set_perms() */
#ifdef HAVE_GETGROUPS #ifdef HAVE_GETGROUPS
if (list_pw == NULL && (user_ngroups = getgroups(0, NULL)) > 0) { if ((user_ngroups = getgroups(0, NULL)) > 0) {
user_groups = emalloc2(user_ngroups, sizeof(gid_t)); user_groups = emalloc2(user_ngroups, sizeof(gid_t));
if (getgroups(user_ngroups, user_groups) < 0) if (getgroups(user_ngroups, user_groups) < 0)
log_error(USE_ERRNO|MSG_ONLY, "can't get group vector"); log_error(USE_ERRNO|MSG_ONLY, "can't get group vector");
@@ -828,6 +828,10 @@ parse_args(argc, argv)
usage(1); usage(1);
if ((list_pw = sudo_getpwnam(NewArgv[1])) == NULL) if ((list_pw = sudo_getpwnam(NewArgv[1])) == NULL)
errorx(1, "unknown user %s", NewArgv[1]); errorx(1, "unknown user %s", NewArgv[1]);
#ifdef HAVE_INITGROUPS
/* Set group vector so group matching works correctly. */
(void) initgroups(list_pw->pw_name, list_pw->pw_gid);
#endif
NewArgc--; NewArgc--;
NewArgv++; NewArgv++;
break; break;