Bug#560333: libc6: getpwnam shows shadow passwords of NIS users
Hello,
the mangling of passwd and passwd.adjunct.byname happens in
glibc-2.7/nis/nss_nis/nis-pwd.c. Before I found out that nscd is part
of the problem, I tried to let the mangling happen only if the calling
user to getpwnam is root (by checking for geteuid() == 0), but that
did not solve the problem, maybe because nscd is running as root and
so the euid is always 0? After replacing the condition (geteuid() == 0)
with (1 == 0), no NIS shadow passwords are shown, not even for root.
Regards
Christoph
Reply to: