]> git.pld-linux.org Git - packages/util-linux.git/blame - su-paths.patch
Up to 2.37.3; fixes CVE-2021-3996, CVE-2021-3995. As of kernel 5.14 raw.h is no longe...
[packages/util-linux.git] / su-paths.patch
CommitLineData
d5aef51d
AM
1diff -urNp -x '*.orig' util-linux-2.36.2.org/login-utils/su-common.c util-linux-2.36.2/login-utils/su-common.c
2--- util-linux-2.36.2.org/login-utils/su-common.c 2021-02-12 12:32:01.749988723 +0100
3+++ util-linux-2.36.2/login-utils/su-common.c 2021-02-28 14:22:27.508126765 +0100
4@@ -100,6 +100,15 @@ UL_DEBUG_DEFINE_MASKNAMES(su) = UL_DEBUG
5
6 #define is_pam_failure(_rc) ((_rc) != PAM_SUCCESS)
b7092f0d
AM
7
8+/* The default paths which get set are both bogus and oddly influenced
9+ by <paths.h> and -D on the commands line. Just to be clear, we'll set
10+ these explicitly. -ewt */
11+#undef DEFAULT_LOGIN_PATH
12+#undef DEFAULT_ROOT_LOGIN_PATH
13+#define DEFAULT_LOGIN_PATH "/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin"
14+#define DEFAULT_ROOT_LOGIN_PATH \
15+ "/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/usr/X11R6/bin:/usr/X11R6/sbin"
16+
17 /* The shell to run if none is given in the user's passwd entry. */
18 #define DEFAULT_SHELL "/bin/sh"
19
This page took 0.070813 seconds and 4 git commands to generate.