File pam_ssh-1.97-setgid.patch of Package pam_ssh
Index: pam_ssh-1.97/pam_ssh.c
===================================================================
--- pam_ssh-1.97.orig/pam_ssh.c
+++ pam_ssh-1.97/pam_ssh.c
@@ -684,7 +684,8 @@ pam_sm_open_session(pam_handle_t *pamh,
_exit(EX_OSERR);
/* NOTREACHED */
case PAM_SUCCESS:
- if (setuid(pwent->pw_uid) == -1) {
+ if (initgroups(pwent->pw_name, pwent->pw_gid) == -1 ||
+ setgid(pwent->pw_gid) == -1 || setuid(pwent->pw_uid) == -1) {
pam_ssh_log(LOG_ERR,
"can't drop privileges: %m",
pwent->pw_uid);