ericonr
/
util-linux
mirror of https://github.com/ericonr/util-linux.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

newgrp: more robust crypt() usage 

Signed-off-by: Karel Zak <kzak@redhat.com>
This commit is contained in:
Karel Zak 2013-02-01 18:00:52 +01:00
parent 6a0766444d
commit 19a1ca6c0d
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
login-utils/newgrp.c
View File

@ -98,10 +98,14 @@ static int allow_setgid(struct passwd *pe, struct group *ge)
if (!(pwd = get_gshadow_pwd(ge->gr_name)))
pwd = ge->gr_passwd;
if (pwd && *pwd && (xpwd = getpass(_("Password: "))))
if (strcmp(pwd, crypt(xpwd, pwd)) == 0)
/* password accepted */
if (pwd && *pwd && (xpwd = getpass(_("Password: ")))) {
char *cbuf = crypt(xpwd, pwd);
if (!cbuf)
warn(_("crypt() failed"));
else if (strcmp(pwd, cbuf) == 0)
return TRUE;
}
/* default to denial */
return FALSE;