VesperOS/shadow
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

groupmems needs to be setuid, not setgid.

Browse Source 
include common-auth and common-account instead of pam_permit.so
This commit is contained in:
nekral-guest
2008-09-14 13:52:21 +00:00
parent da34d2eac4
commit 21d6b34360
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
debian/patches/900_testsuite_groupmems
Vendored
+3 -3
View File
@@ -72,7 +72,7 @@ Index: shadow-4.1.2/debian/rules
chmod g+s debian/passwd/usr/bin/chage
chmod g+s debian/passwd/usr/bin/expiry
+ chgrp groupmems debian/passwd/usr/sbin/groupmems
+ chmod g+s debian/passwd/usr/sbin/groupmems
+ chmod u+s debian/passwd/usr/sbin/groupmems
+ chmod o-x debian/passwd/usr/sbin/groupmems
Index: shadow-4.1.2/debian/passwd.groupmems.pam
===================================================================
@@ -85,5 +85,5 @@ Index: shadow-4.1.2/debian/passwd.groupmems.pam
+# This allows root to modify groups without being prompted for a password
+auth sufficient pam_rootok.so
+
+# checks for account validity
+account required pam_permit.so
+@include common-auth
+@include common-account