From 90574f1004df54faf3f243447914fe49f40b3e02 Mon Sep 17 00:00:00 2001 From: Robert Watson Date: Sat, 15 Sep 2001 16:12:56 +0000 Subject: o Add a comment noting that the early setting of privileges for the purpose of NFS home directory and root directory processing fails to include additional groups. This doesn't impact the final credential, but does mean that users may be denied login even when additional groups might allow it. --- libutil/login_cap.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'libutil/login_cap.c') diff --git a/libutil/login_cap.c b/libutil/login_cap.c index dc93e28..85883be 100644 --- a/libutil/login_cap.c +++ b/libutil/login_cap.c @@ -193,8 +193,12 @@ login_getclassbyname(char const *name, const struct passwd *pwd) static char *login_dbarray[] = { NULL, NULL, NULL }; - /* Switch to user mode before checking/reading its ~/.login_conf */ - /* - some NFSes have root read access disabled. */ + /* + * Switch to user mode before checking/reading its ~/.login_conf + * - some NFSes have root read access disabled. + * + * XXX: This fails to configure additional groups. + */ if (dir) { euid = geteuid(); egid = getegid(); -- cgit v1.2.3