Subject: CVS commit: src/usr.sbin/cron
To: None <source-changes@netbsd.org>
From: Christos Zoulas <christos@netbsd.org>
List: source-changes
Date: 03/14/2003 23:56:08
Module Name: src
Committed By: christos
Date: Fri Mar 14 21:56:08 UTC 2003
Modified Files:
src/usr.sbin/cron: Makefile do_command.c
Log Message:
PR/15142: Kevin P. Neal: cron does not pay attention to login_cap(3)
I simplified the patch addressed certain security concerns. I only
allowed setusercontext() to set resource limits/priority and umask,
because these are the values that are relevant from login.conf. The
rest of the settings (uid/gid/initgroups) should be done using e->uid
and e->gid like they were before, not from:
struct passwd *pwd = getpwnam(getenv("LOGNAME"));
Finally login_cap's (path/env) are irrelevant in this context since
we want to use our e->envp anyway to execute the command.
To generate a diff of this commit:
cvs rdiff -r1.9 -r1.10 src/usr.sbin/cron/Makefile
cvs rdiff -r1.12 -r1.13 src/usr.sbin/cron/do_command.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.