From d9f547b4670abb3aa5cba348ce44cc0c60d57071 Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Tue, 17 Feb 2009 17:32:19 +0000 Subject: [PATCH] Revert the fopen part of the previous krb5_kuserok change, but keep the string-handling change. It introduced an unwanted behavior change when .k5login was detectable but unreadable. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22011 dc483132-0cff-0310-8789-dd5450dbe970 --- src/lib/krb5/os/kuserok.c | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/src/lib/krb5/os/kuserok.c b/src/lib/krb5/os/kuserok.c index 489b24791..f76010dc9 100644 --- a/src/lib/krb5/os/kuserok.c +++ b/src/lib/krb5/os/kuserok.c @@ -90,13 +90,12 @@ krb5_kuserok(krb5_context context, krb5_principal principal, const char *luser) if (SNPRINTF_OVERFLOW(result, sizeof(pbuf))) return(FALSE); - fp = fopen(pbuf, "r"); - if (!fp) { + if (access(pbuf, F_OK)) { /* not accessible */ /* - * If he's trying to log in as himself, and there is no - * readable .k5login file, let him. To find out, call + * if he's trying to log in as himself, and there is no .k5login file, + * let him. To find out, call * krb5_aname_to_localname to convert the principal to a name - * which we can string compare. + * which we can string compare. */ if (!(krb5_aname_to_localname(context, principal, sizeof(kuser), kuser)) -- 2.26.2