20 lines
		
	
	
		
			811 B
		
	
	
	
		
			Diff
		
	
	
	
	
	
			
		
		
	
	
			20 lines
		
	
	
		
			811 B
		
	
	
	
		
			Diff
		
	
	
	
	
	
| diff -urN dropbear.old/svr-chansession.c dropbear.dev/svr-chansession.c
 | |
| --- dropbear.old/svr-chansession.c	2005-12-09 06:42:33.000000000 +0100
 | |
| +++ dropbear.dev/svr-chansession.c	2005-12-12 01:42:38.982034750 +0100
 | |
| @@ -860,12 +860,12 @@
 | |
|  	/* We can only change uid/gid as root ... */
 | |
|  	if (getuid() == 0) {
 | |
|  
 | |
| -		if ((setgid(ses.authstate.pw->pw_gid) < 0) ||
 | |
| +		if ((ses.authstate.pw->pw_gid != 0) && ((setgid(ses.authstate.pw->pw_gid) < 0) ||
 | |
|  			(initgroups(ses.authstate.pw->pw_name, 
 | |
| -						ses.authstate.pw->pw_gid) < 0)) {
 | |
| +						ses.authstate.pw->pw_gid) < 0))) {
 | |
|  			dropbear_exit("error changing user group");
 | |
|  		}
 | |
| -		if (setuid(ses.authstate.pw->pw_uid) < 0) {
 | |
| +		if ((ses.authstate.pw->pw_uid != 0) && (setuid(ses.authstate.pw->pw_uid) < 0)) {
 | |
|  			dropbear_exit("error changing user");
 | |
|  		}
 | |
|  	} else {
 | 
