X-Git-Url: https://git.saurik.com/apple/network_cmds.git/blobdiff_plain/ac2f15b3eadabcc5cceb4bb7f642395e9616a902..a2c93a7642e62c7ca181f6c580d729f73b14bded:/rlogind.tproj/rlogind.c diff --git a/rlogind.tproj/rlogind.c b/rlogind.tproj/rlogind.c index 8f1a346..5bd88f8 100644 --- a/rlogind.tproj/rlogind.c +++ b/rlogind.tproj/rlogind.c @@ -3,22 +3,21 @@ * * @APPLE_LICENSE_HEADER_START@ * - * Copyright (c) 1999-2003 Apple Computer, Inc. All Rights Reserved. - * - * This file contains Original Code and/or Modifications of Original Code - * as defined in and that are subject to the Apple Public Source License - * Version 2.0 (the 'License'). You may not use this file except in - * compliance with the License. Please obtain a copy of the License at - * http://www.opensource.apple.com/apsl/ and read it before using this - * file. + * "Portions Copyright (c) 1999 Apple Computer, Inc. All Rights + * Reserved. This file contains Original Code and/or Modifications of + * Original Code as defined in and that are subject to the Apple Public + * Source License Version 1.0 (the 'License'). You may not use this file + * except in compliance with the License. Please obtain a copy of the + * License at http://www.apple.com/publicsource and read it before using + * this file. * * The Original Code and all software distributed under the License are * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, - * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. - * Please see the License for the specific language governing rights and - * limitations under the License. + * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT. Please see the + * License for the specific language governing rights and limitations + * under the License." * * @APPLE_LICENSE_HEADER_END@ */ @@ -599,11 +598,19 @@ do_rlogin(dest) getstr(term+ENVSIZE, sizeof(term)-ENVSIZE, "Terminal type too long"); pwd = getpwnam(lusername); - if (pwd == NULL) + if (pwd == NULL) { + syslog(LOG_ERR, + "rlogin denied for user %s: getpwnam() failed\n", + lusername); return (-1); - if (pwd->pw_uid == 0) + } + if (pwd->pw_uid == 0 && strcmp("root", lusername)) + { + syslog(LOG_ALERT, + "rlogin denied for non-root user %s with uid 0\n", + lusername); return (-1); - /* XXX why don't we syslog() failure? */ + } return (iruserok(dest->sin_addr.s_addr, 0, rusername, lusername)); }