don't accept connections from ports below 512

[unix-history] / usr / src / libexec / rlogind / rlogind.c

diff --git a/usr/src/libexec/rlogind/rlogind.c b/usr/src/libexec/rlogind/rlogind.c
index 2fbf559..eec0cb3 100644 (file)
--- a/usr/src/libexec/rlogind/rlogind.c
+++ b/usr/src/libexec/rlogind/rlogind.c
@@ -11,7 +11,7 @@ char copyright[] =
 #endif not lint
 
 #ifndef lint
 #endif not lint
 
 #ifndef lint

-static char sccsid[] = "@(#)rlogind.c  5.12 (Berkeley) %G%";
+static char sccsid[] = "@(#)rlogind.c  5.13 (Berkeley) %G%";

 #endif not lint
 
 /*
 #endif not lint
 
 /*


@@ -104,7 +104,8 @@ doit(f, fromp)
                hp->h_name = inet_ntoa(fromp->sin_addr);
        }
        if (fromp->sin_family != AF_INET ||
                hp->h_name = inet_ntoa(fromp->sin_addr);
        }
        if (fromp->sin_family != AF_INET ||

-           fromp->sin_port >= IPPORT_RESERVED)
+           fromp->sin_port >= IPPORT_RESERVED ||
+           fromp->sin_port < IPPORT_RESERVED/2)

                fatal(f, "Permission denied");
        write(f, "", 1);
        for (c = 'p'; c <= 's'; c++) {
                fatal(f, "Permission denied");
        write(f, "", 1);
        for (c = 'p'; c <= 's'; c++) {