emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

Merge pull request #143 from t8m/fedora

Browse Source 
usermod: Guard against unsafe change of ownership of home contents
This commit is contained in:
Serge Hallyn
2019-04-21 16:56:36 -05:00
committed by GitHub
parent fe87a1ad96 5b41b7d1b1
commit fbb59823c5
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/usermod.c
View File

@@ -2313,7 +2313,10 @@ int main (int argc, char **argv)
}
if (!mflg && (uflg || gflg)) {
if (access (dflg ? prefix_user_newhome : prefix_user_home, F_OK) == 0) {
struct stat sb;
if (stat (dflg ? prefix_user_newhome : prefix_user_home, &sb) == 0 &&
((uflg && sb.st_uid == user_newid) || sb.st_uid == user_id)) {
/*
* Change the UID on all of the files owned by
* `user_id' to `user_newid' in the user's home