From 8df8b73f3c6fadb731f5d55a07124a7e93c0ee49 Mon Sep 17 00:00:00 2001 From: Robert Watson Date: Sat, 15 Sep 2001 16:12:56 +0000 Subject: o Add a comment noting that the early setting of privileges for the purpose of NFS home directory and root directory processing fails to include additional groups. This doesn't impact the final credential, but does mean that users may be denied login even when additional groups might allow it. --- lib/libutil/login_cap.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'lib/libutil') diff --git a/lib/libutil/login_cap.c b/lib/libutil/login_cap.c index dc93e2825a2c..85883be82873 100644 --- a/lib/libutil/login_cap.c +++ b/lib/libutil/login_cap.c @@ -193,8 +193,12 @@ login_getclassbyname(char const *name, const struct passwd *pwd) static char *login_dbarray[] = { NULL, NULL, NULL }; - /* Switch to user mode before checking/reading its ~/.login_conf */ - /* - some NFSes have root read access disabled. */ + /* + * Switch to user mode before checking/reading its ~/.login_conf + * - some NFSes have root read access disabled. + * + * XXX: This fails to configure additional groups. + */ if (dir) { euid = geteuid(); egid = getegid(); -- cgit v1.3