From: Jan-Simon Pendry <pendry@ucbvax.Berkeley.EDU>
Date: Sun, 3 Apr 1994 01:34:15 +0000 (-0800)
Subject: don't allow kerberos root login if the root instance is missing
X-Git-Tag: BSD-4_4_Lite2-Snapshot-Development~2863
X-Git-Url: https://git.subgeniuskitty.com/unix-history/.git/commitdiff_plain/011f52c6d88e4f7052c732ac4afa9bfe9c56c0a9

don't allow kerberos root login if the root instance is missing

SCCS-vsn: usr.bin/login/login.c 8.4
---

diff --git a/usr/src/usr.bin/login/login.c b/usr/src/usr.bin/login/login.c
index f4b4165f73..371446fda1 100644
--- a/usr/src/usr.bin/login/login.c
+++ b/usr/src/usr.bin/login/login.c
@@ -12,7 +12,7 @@ static char copyright[] =
 #endif /* not lint */
 
 #ifndef lint
-static char sccsid[] = "@(#)login.c	8.3 (Berkeley) %G%";
+static char sccsid[] = "@(#)login.c	8.4 (Berkeley) %G%";
 #endif /* not lint */
 
 /*
@@ -259,6 +259,8 @@ main(argc, argv)
 		if (pwd) {
 #ifdef KERBEROS
 			rval = klogin(pwd, instance, localhost, p);
+			if (rval != 0 && rootlogin && pwd->pw_uid != 0)
+				rootlogin = 0;
 			if (rval == 0)
 				authok = 1;
 			else if (rval == 1)