From 011f52c6d88e4f7052c732ac4afa9bfe9c56c0a9 Mon Sep 17 00:00:00 2001 From: Jan-Simon Pendry Date: Sat, 2 Apr 1994 17:34:15 -0800 Subject: [PATCH] don't allow kerberos root login if the root instance is missing SCCS-vsn: usr.bin/login/login.c 8.4 --- usr/src/usr.bin/login/login.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/usr/src/usr.bin/login/login.c b/usr/src/usr.bin/login/login.c index f4b4165f73..371446fda1 100644 --- a/usr/src/usr.bin/login/login.c +++ b/usr/src/usr.bin/login/login.c @@ -12,7 +12,7 @@ static char copyright[] = #endif /* not lint */ #ifndef lint -static char sccsid[] = "@(#)login.c 8.3 (Berkeley) %G%"; +static char sccsid[] = "@(#)login.c 8.4 (Berkeley) %G%"; #endif /* not lint */ /* @@ -259,6 +259,8 @@ main(argc, argv) if (pwd) { #ifdef KERBEROS rval = klogin(pwd, instance, localhost, p); + if (rval != 0 && rootlogin && pwd->pw_uid != 0) + rootlogin = 0; if (rval == 0) authok = 1; else if (rval == 1) -- 2.20.1