Tree - rpms/openssh - src.fedoraproject.org

Blob History Raw

	1900351	`diff --git a/authfile.c b/authfile.c`
	1900351	`index e93d867..4fc5b3d 100644`
	1900351	`--- a/authfile.c`
	1900351	`+++ b/authfile.c`
	1900351	`@@ -32,6 +32,7 @@`
Jan F	1ddd0ee
	94c6f8d	`#include <errno.h>`
	94c6f8d	`#include <fcntl.h>`
	94c6f8d	`+#include <grp.h>`
	94c6f8d	`#include <stdio.h>`
	1900351	`#include <stdarg.h>`
	94c6f8d	`#include <stdlib.h>`
	1900351	`@@ -207,6 +208,13 @@ sshkey_perm_ok(int fd, const char *filename)`
Jan F	1ddd0ee	`#ifdef HAVE_CYGWIN`
Jan F	1ddd0ee	`if (check_ntsec(filename))`
Jan F	1ddd0ee	`#endif`
Jan F	1ddd0ee	`+ if (st.st_mode & 040) {`
Jan F	1ddd0ee	`+ struct group *gr;`
Jan F	1ddd0ee	`+`
Jan F	1ddd0ee	`+ if ((gr = getgrnam("ssh_keys")) && (st.st_gid == gr->gr_gid))`
Jan F	0ecc97b	`+ st.st_mode &= ~040;`
Jan F	1ddd0ee	`+ }`
Jan F	1ddd0ee	`+`
Jan F	1ddd0ee	`if ((st.st_uid == getuid()) && (st.st_mode & 077) != 0) {`
Jan F	1ddd0ee	`error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");`
Jan F	1ddd0ee	`error("@ WARNING: UNPROTECTED PRIVATE KEY FILE! @");`