1
0
mirror of http://galexander.org/git/simplesshd.git synced 2024-11-30 11:18:12 +00:00

Disable DROPBEAR_SVR_MULTIUSER, because we don't want to be calling

setuid/seteuid sort of stuff (it won't work, and I think sec-comp or
something kills our process).  Also need to disable the sanity check.
This commit is contained in:
Greg Alexander 2019-06-16 19:46:16 -04:00
parent 23a2bda614
commit bb8753a5a6
3 changed files with 4 additions and 2 deletions

View File

@ -68,7 +68,7 @@ void common_session_init(int sock_in, int sock_out) {
/* Sets it to lowdelay */
update_channel_prio();
#if !DROPBEAR_SVR_MULTIUSER
#if 0 && !DROPBEAR_SVR_MULTIUSER
/* A sanity check to prevent an accidental configuration option
leaving multiuser systems exposed */
errno = 0;

View File

@ -297,3 +297,5 @@ be overridden at runtime with -I. 0 disables idle timeouts */
/* The default path. This will often get replaced by the shell */
#define DEFAULT_PATH "/sbin:/system/sbin:/system/bin:/system/xbin"
#define DROPBEAR_SVR_MULTIUSER 0

View File

@ -961,7 +961,7 @@ static void execchild(const void *user_data) {
#endif /* DEBUG_VALGRIND */
#endif
#if 0 /* DROPBEAR_SVR_MULTIUSER */
#if DROPBEAR_SVR_MULTIUSER
/* We can only change uid/gid as root ... */
if (getuid() == 0) {