Nicolas Williams f10de508a6 Check fcache st_uid == geteuid(), not getuid() ...

Programs like sshd may create or access a ccache with
ruid != user's UID, euid == user's UID.

Set-uid-0 programs (ob reminder: they start life as ruid == user's UID,
euid == 0) shouldn't unintentionally access ccaches.  Therefore we
shouldn't check both of ruid and euid, just euid.

2013-10-04 18:24:38 -05:00

32 KiB

Raw Blame History

View Raw