Package: boa
Version: 0.94.13-1
Severity: normal
Tags: patch
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I have an embedded system where getpwuid fails (NSS don't work). I don't
think this is security critical, so I don't see why boa dies.
Here is a patch to change it (and an initgroups failure) from a death to
a warning.
diff -rdbU3 boa-0.94.13/src/boa.c boa-0.94.13.new/src/boa.c
- --- boa-0.94.13/src/boa.c 2002-07-23 11:50:29.000000000 -0400
+++ boa-0.94.13.new/src/boa.c 2003-01-03 02:59:14.000000000 -0500
@@ -208,10 +208,11 @@
struct passwd *passwdbuf;
passwdbuf = getpwuid(server_uid);
if (passwdbuf == NULL) {
- - DIE("getpwuid");
- - }
+ WARN("getpwuid - will not initgroups");
+ } else {
if (initgroups(passwdbuf->pw_name, passwdbuf->pw_gid) == -1) {
- - DIE("initgroups");
+ WARN("initgroups");
+ }
}
if (setgid(server_gid) == -1) {
DIE("setgid");
- -- System Information
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux bohr 2.4.16 #2 SMP Wed Nov 28 05:25:00 EST 2001 i686
Locale: LANG=en_US, LC_CTYPE=en_US
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
iD8DBQE+FUT++z+IwlXqWf4RApEWAJwPbwAwyGsCRxBiC3cQYAR4wpWW6gCcD1dg
0NAACjZ7IXWm+NgIQgADHZk=
=maU+
-----END PGP SIGNATURE-----
