File openssh-7.6p1-remove_xauth_cookies_on_exit.patch of Package openssh.21986
# HG changeset patch
# Parent 2c6d52d1229cbfd1cd4b7b356bb649470df4d3b3
# --used to be called '-xauth'
try to remove xauth cookies on logout
bnc#98815
Index: openssh-7.6p1/session.c
===================================================================
--- openssh-7.6p1.orig/session.c 2019-03-12 14:34:21.007505834 +0100
+++ openssh-7.6p1/session.c 2019-03-12 14:38:27.580887121 +0100
@@ -2299,6 +2299,34 @@ session_close(struct ssh *ssh, Session *
ssh_remote_port(ssh),
s->self);
+ if ((s->display != NULL) && (s->auth_proto != NULL) &&
+ (s->auth_data != NULL) && (options.xauth_location != NULL)) {
+ pid_t pid;
+ FILE *f;
+ char cmd[1024];
+ struct passwd * pw = s->pw;
+
+ if (!(pid = fork())) {
+ permanently_set_uid(pw);
+
+ /* Remove authority data from .Xauthority if appropriate. */
+ debug("Running %.500s remove %.100s\n",
+ options.xauth_location, s->auth_display);
+
+ snprintf(cmd, sizeof cmd, "unset XAUTHORITY && HOME=\"%.200s\" %s -q -",
+ s->pw->pw_dir, options.xauth_location);
+ f = popen(cmd, "w");
+ if (f) {
+ fprintf(f, "remove %s\n", s->auth_display);
+ pclose(f);
+ } else
+ error("Could not run %s\n", cmd);
+ exit(0);
+ } else if (pid > 0) {
+ waitpid(pid, NULL, 0);
+ }
+ }
+
if (s->ttyfd != -1)
session_pty_cleanup(s);
free(s->term);