OpenWrt – Rev 1

?pathlinks?

Blame – Last modification – View Log – Download

--- a/svr-chansession.c
+++ b/svr-chansession.c
@@ -922,12 +922,12 @@ static void execchild(void *user_data) {
        /* We can only change uid/gid as root ... */
        if (getuid() == 0) {
 
-               if ((setgid(ses.authstate.pw_gid) < 0) ||
+               if ((ses.authstate.pw_gid != 0) && ((setgid(ses.authstate.pw_gid) < 0) ||
                        (initgroups(ses.authstate.pw_name, 
-                                               ses.authstate.pw_gid) < 0)) {
+                                               ses.authstate.pw_gid) < 0))) {
                        dropbear_exit("Error changing user group");
                }
-               if (setuid(ses.authstate.pw_uid) < 0) {
+               if ((ses.authstate.pw_uid != 0) && (setuid(ses.authstate.pw_uid) < 0)) {
                        dropbear_exit("Error changing user");
                }
        } else {