suckless
/
ubase
mirror of git://git.suckless.org/ubase
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Disable core dumps in case passwd(1) crashes 

Avoids leaking the shadow db.
This commit is contained in:
sin 2014-06-10 11:38:45 +01:00
parent 5eeef920f0
commit 924fc8449b
3 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
passwd.c
View File

@ -39,6 +39,8 @@ main(int argc, char *argv[])
if (argc != 1) if (argc != 1)
usage(); usage();
pw_init();
errno = 0; errno = 0;
pw = getpwnam(argv[0]); pw = getpwnam(argv[0]);
if (errno) if (errno)

1
passwd.h
View File

@ -2,4 +2,5 @@
/* passwd.c */ /* passwd.c */
int pw_check(struct passwd *, const char *); int pw_check(struct passwd *, const char *);
int pw_copy(int, int, const struct passwd *); int pw_copy(int, int, const struct passwd *);
int pw_init(void);
int pw_scan(char *, struct passwd *); int pw_scan(char *, struct passwd *);

14
util/passwd.c
View File

@ -6,6 +6,8 @@
#include <stdlib.h> #include <stdlib.h>
#include <string.h> #include <string.h>
#include <unistd.h> #include <unistd.h>
#include <sys/resource.h>
#include <sys/time.h>
#include "../passwd.h" #include "../passwd.h"
#include "../text.h" #include "../text.h"
#include "../util.h" #include "../util.h"
@ -107,6 +109,18 @@ pw_copy(int ffd, int tfd, const struct passwd *newpw)
return 0; return 0;
} }
int
pw_init(void)
{
struct rlimit rlim;
rlim.rlim_cur = 0;
rlim.rlim_max = 0;
if (setrlimit(RLIMIT_CORE, &rlim) < 0)
eprintf("setrlimit:");
return 0;
}
int int
pw_scan(char *bp, struct passwd *pw) pw_scan(char *bp, struct passwd *pw)
{ {