File pam_ssh-1.97-setgid.patch of Package pam_ssh

Index: pam_ssh-1.97/pam_ssh.c
===================================================================
--- pam_ssh-1.97.orig/pam_ssh.c
+++ pam_ssh-1.97/pam_ssh.c
@@ -684,7 +684,8 @@ pam_sm_open_session(pam_handle_t *pamh,
 				_exit(EX_OSERR);
 				/* NOTREACHED */
 			case PAM_SUCCESS:
-				if (setuid(pwent->pw_uid) == -1) {
+				if (initgroups(pwent->pw_name, pwent->pw_gid) == -1 ||
+				setgid(pwent->pw_gid) == -1 || setuid(pwent->pw_uid) == -1) {
 					pam_ssh_log(LOG_ERR,
 					    "can't drop privileges: %m",
 					    pwent->pw_uid);
openSUSE Build Service is sponsored by