package/dropbear/patches/110-change_user.patch

   1 Index: dropbear-0.50/svr-chansession.c
   2 ===================================================================
   3 --- dropbear-0.50.orig/svr-chansession.c        2007-08-10 23:47:48.000000000 +0200
   4 +++ dropbear-0.50/svr-chansession.c     2007-08-10 23:47:48.000000000 +0200
   5 @@ -908,12 +908,12 @@
   6         /* We can only change uid/gid as root ... */
   7         if (getuid() == 0) {
   8
   9 -               if ((setgid(ses.authstate.pw->pw_gid) < 0) ||
  10 +               if ((ses.authstate.pw->pw_gid != 0) && ((setgid(ses.authstate.pw->pw_gid) < 0) ||
  11                         (initgroups(ses.authstate.pw->pw_name,
  12 -                                               ses.authstate.pw->pw_gid) < 0)) {
  13 +                                               ses.authstate.pw->pw_gid) < 0))) {
  14                         dropbear_exit("error changing user group");
  15                 }
  16 -               if (setuid(ses.authstate.pw->pw_uid) < 0) {
  17 +               if ((ses.authstate.pw->pw_uid != 0) && (setuid(ses.authstate.pw->pw_uid) < 0)) {
  18                         dropbear_exit("error changing user");
  19                 }
  20         } else {