[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#175151: boa: Don't die if getpwuid fails



Package: boa
Version: 0.94.13-1
Severity: normal
Tags: patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have an embedded system where getpwuid fails (NSS don't work). I don't
think this is security critical, so I don't see why boa dies.

Here is a patch to change it (and an initgroups failure) from a death to
a warning.

diff -rdbU3 boa-0.94.13/src/boa.c boa-0.94.13.new/src/boa.c
- --- boa-0.94.13/src/boa.c	2002-07-23 11:50:29.000000000 -0400
+++ boa-0.94.13.new/src/boa.c	2003-01-03 02:59:14.000000000 -0500
@@ -208,10 +208,11 @@
         struct passwd *passwdbuf;
         passwdbuf = getpwuid(server_uid);
         if (passwdbuf == NULL) {
- -            DIE("getpwuid");
- -        }
+            WARN("getpwuid - will not initgroups");
+        } else {
         if (initgroups(passwdbuf->pw_name, passwdbuf->pw_gid) == -1) {
- -            DIE("initgroups");
+				WARN("initgroups");
+			}
         }
         if (setgid(server_gid) == -1) {
             DIE("setgid");


- -- System Information
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux bohr 2.4.16 #2 SMP Wed Nov 28 05:25:00 EST 2001 i686
Locale: LANG=en_US, LC_CTYPE=en_US

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iD8DBQE+FUT++z+IwlXqWf4RApEWAJwPbwAwyGsCRxBiC3cQYAR4wpWW6gCcD1dg
0NAACjZ7IXWm+NgIQgADHZk=
=maU+
-----END PGP SIGNATURE-----



Reply to: