[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#560333: libc6: getpwnam shows shadow passwords of NIS users



Hello,

the mangling of passwd and passwd.adjunct.byname happens in
glibc-2.7/nis/nss_nis/nis-pwd.c. Before I found out that nscd is part
of the problem, I tried to let the mangling happen only if the calling
user to getpwnam is root (by checking for geteuid() == 0), but that
did not solve the problem, maybe because nscd is running as root and
so the euid is always 0? After replacing the condition (geteuid() == 0)
with (1 == 0), no NIS shadow passwords are shown, not even for root.

Regards
  Christoph



Reply to: