From: Theodore Tso <tytso@mit.edu>
Date: Tue, 25 Mar 1997 06:16:54 +0000 (+0000)
Subject: rcache owner should be checked against the effective uid, not the real
X-Git-Tag: krb5-1.1-beta1~1171
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=82d72a406fd3823b0ee00bfe41c4227018b454d8;p=krb5.git

rcache owner should be checked against the effective uid, not the real
uid.  [krb5-libs/366]

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10027 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/krb5/rcache/ChangeLog b/src/lib/krb5/rcache/ChangeLog
index 1ebc2cffa..2ce2ac7cd 100644
--- a/src/lib/krb5/rcache/ChangeLog
+++ b/src/lib/krb5/rcache/ChangeLog
@@ -1,3 +1,8 @@
+Tue Mar 25 01:15:39 1997  Theodore Y. Ts'o  <tytso@mit.edu>
+
+	* rc_io.c (krb5_rc_io_open): rcache owner should be checked against
+		the effective uid, not the real uid.  [krb5-libs/366]
+
 Sat Feb 22 22:44:15 1997  Richard Basch  <basch@lehman.com>
 
 	* Makefile.in: Use some of the new library list build rules in
diff --git a/src/lib/krb5/rcache/rc_io.c b/src/lib/krb5/rcache/rc_io.c
index bf11e8ff9..3d69c15bd 100644
--- a/src/lib/krb5/rcache/rc_io.c
+++ b/src/lib/krb5/rcache/rc_io.c
@@ -185,7 +185,7 @@ krb5_error_code krb5_rc_io_open (context, d, fn)
  if ((d->fd = stat(d->fn, &statb)) != -1) {
      uid_t me;
 
-     me = getuid();
+     me = geteuid();
      /* must be owned by this user, to prevent some security problems with
 	 * other users modifying replay cache stufff */
      if ((statb.st_uid != me) || ((statb.st_mode & S_IFMT) != S_IFREG)) {