[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: PROPOSAL: Add --disable-setuid to configure to disable calls to setu
James E Jurach Jr.
Re: PROPOSAL: Add --disable-setuid to configure to disable calls to setuid(), etc.
Tue, 02 Jul 2002 11:40:24 -0500
> James E Jurach Jr. writes:
> > PURPOSE: To allow pserver to run as non-root.
> It already can, you just need to use the third field in CVSROOT/passwd
> file to map every CVS user to the system user you're running pserver as.
> -Larry Jones
check_password() is only called during a "BEGIN AUTH REQUEST"
authentication; check_password() is not called during a
"BEGIN GSSAPI REQUEST" authentication, so this trick is unavailable.