[Bug 177698] [libutil] [patch] sshd sets the user's MAC label at the same time it attempts to set the login class, which can cause the latter to fail if mac_biba is used.

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Aug 21 23:08:26 UTC 2014


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=177698

--- Comment #1 from ta0kira at gmail.com ---
(The following comment did not carry over when the bug report was migrated to
the new system.)

From:     Kevin Barry <ta0kira at gmail.com> [submitter]
To:     bug-followup at FreeBSD.org, ta0kira at gmail.com
Date:     Sun, 7 Apr 2013 23:50:35 -0400
I submitted this bug report earlier, and since then I've noticed that
/usr/bin/login suffers from the same problem. I've therefore made a change
to libutil to make setusercontext set the MAC label right before the uid
change. I've attached a separate patch that should universally fix the
problem. This also makes my previous sshd patch obsolete. Incidentally,
this should be reclassified as a bug in libutil.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list