Attachment 23713 Details for Bug 57238

[patch] REAL patch to add the -x switch to su

su-no-x.patch (text/plain), 3.59 KB, created by Ben Kahn on 2004-09-21 04:38:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ben Kahn

Created: 2004-09-21 04:38:30 UTC

Size: 3.59 KB

patch

obsolete

>diff -r -u coreutils-5.2.1/src/su.c coreutils-5.2.1-new/src/su.c
>--- coreutils-5.2.1/src/su.c	2004-09-20 16:35:51.129779814 -0400
>+++ coreutils-5.2.1-new/src/su.c	2004-09-20 13:35:57.888384165 -0400
>@@ -65,6 +65,8 @@
>    -s, --shell=shell	Run SHELL instead of USER's shell from /etc/passwd
> 			unless not the superuser and USER's shell is
> 			restricted.
>+   -x, --no-x           Removes the DISPLAY environment variable, useful when
>+                        changing to a user you don't trust completely.
> 
>    Compile-time options:
>    -DSYSLOG_SUCCESS	Log successful su's (by default, to root) with syslog.
>@@ -173,6 +175,9 @@
> /* If nonzero, simulate a login instead of just starting a shell.  */
> static int simulate_login;
> 
>+/* If nonzero, remove the DISPLAY environment variable */
>+static int remove_display;
>+
> /* If nonzero, change some environment vars to indicate the user su'd to.  */
> static int change_environment;
> 
>@@ -183,6 +188,7 @@
>   {"login", no_argument, NULL, 'l'},
>   {"preserve-environment", no_argument, &change_environment, 0},
>   {"shell", required_argument, 0, 's'},
>+  {"no-x", no_argument, NULL, 'x'},
>   {GETOPT_HELP_OPTION_DECL},
>   {GETOPT_VERSION_OPTION_DECL},
>   {0, 0, 0, 0}
>@@ -532,6 +538,15 @@
> #endif /* !USE_PAM */
> }
> 
>+/* Check to see if the DISPLAY environment variable needs to be 
>+   cleared */
>+static void
>+modify_display ()
>+{
>+  if (remove_display)
>+    unsetenv ("DISPLAY");
>+}
>+
> /* Update `environ' for the new shell based on PW, with SHELL being
>    the value for the SHELL environment variable.  */
> 
>@@ -539,6 +554,8 @@
> modify_environment (const struct passwd *pw, const char *shell)
> {
>   char *term;
>+  char *display;
>+  char *xauthority;
> 
> #ifdef USE_PAM
>   /* Export env variables declared by PAM modules */
>@@ -556,13 +573,19 @@
> 
>   if (simulate_login)
>     {
>-      /* Leave TERM unchanged.  Set HOME, SHELL, USER, LOGNAME, PATH.
>+      /* Leave TERM, DISPLAY, XAUTHORITY unchanged.  Set HOME, SHELL, USER, LOGNAME, PATH.
>          Unset all other environment variables.  */
>       term = getenv ("TERM");
>+      display = getenv ("DISPLAY");
>+      xauthority = getenv ("XAUTHORITY");
>       environ = xmalloc (2 * sizeof (char *));
>       environ[0] = 0;
>       if (term)
> 	xputenv (concat ("TERM", "=", term));
>+      if (display)
>+	xputenv (concat ("DISPLAY", "=", display));
>+      if (xauthority)
>+	xputenv (concat ("XAUTHORITY", "=", xauthority));
>       xputenv (concat ("HOME", "=", pw->pw_dir));
>       xputenv (concat ("SHELL", "=", shell));
>       xputenv (concat ("USER", "=", pw->pw_name));
>@@ -805,6 +828,7 @@
>   -m, --preserve-environment   do not reset environment variables\n\
>   -p                           same as -m\n\
>   -s, --shell=SHELL            run SHELL if /etc/shells allows it\n\
>+  -x, --no-x                   remove the DISPLAY environment variable\n\
> "), stdout);
>       fputs (HELP_OPTION_DESCRIPTION, stdout);
>       fputs (VERSION_OPTION_DESCRIPTION, stdout);
>@@ -840,8 +864,9 @@
>   fast_startup = 0;
>   simulate_login = 0;
>   change_environment = 1;
>+  remove_display = 0;
> 
>-  while ((optc = getopt_long (argc, argv, "c:flmps:", longopts, NULL)) != -1)
>+  while ((optc = getopt_long (argc, argv, "c:flmps:x", longopts, NULL)) != -1)
>     {
>       switch (optc)
> 	{
>@@ -869,6 +894,10 @@
> 	  shell = optarg;
> 	  break;
> 
>+	case 'x':
>+	  remove_display = 1;
>+	  break;
>+
> 	case_GETOPT_HELP_CHAR;
> 
> 	case_GETOPT_VERSION_CHAR (PROGRAM_NAME, AUTHORS);
>@@ -941,6 +970,8 @@
>       shell = xstrdup (pw->pw_shell);
>     }
> 
>+  modify_display ();
>+
>   change_identity (pw);
> 
>   /* Set environment after pam_open_session, which may put
>Only in coreutils-5.2.1-new/src: su.c~

Actions: View | Diff

Attachments on bug 57238: 23708 | 23713 | 24332 | 28021 | 28022 | 28114 | 28115