Attachment 853423 Details for Bug 1052902 – patch -- gssd: set $HOME to prevent recursion when home dirs are on kerberized NFS mount

[patch] patch -- gssd: set $HOME to prevent recursion when home dirs are on kerberized NFS mount

0001-gssd-set-HOME-to-prevent-recursion-when-home-dirs-ar.patch (text/plain), 1.28 KB, created by Jeff Layton on 2014-01-21 18:32:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jeff Layton

Created: 2014-01-21 18:32:01 UTC

Size: 1.28 KB

patch

obsolete

>From fd0a9d9a4465ec7eacc8136fec92523652ca3295 Mon Sep 17 00:00:00 2001
>From: Jeff Layton <jlayton@redhat.com>
>Date: Tue, 21 Jan 2014 13:28:54 -0500
>Subject: [PATCH] gssd: set $HOME to prevent recursion when home dirs are on
> kerberized NFS mount
>
>Some krb5 routines will attempt to access files in the user's home
>directory. This is problematic for gssd when the user's homedir is
>on a kerberized NFS mount as it will end up deadlocked.
>
>Fix this by setting $HOME unconditionally to "/".
>
>Signed-off-by: Jeff Layton <jlayton@redhat.com>
>---
> utils/gssd/gssd.c | 12 ++++++++++++
> 1 file changed, 12 insertions(+)
>
>diff --git a/utils/gssd/gssd.c b/utils/gssd/gssd.c
>index fdad153..c3c7d4c 100644
>--- a/utils/gssd/gssd.c
>+++ b/utils/gssd/gssd.c
>@@ -161,6 +161,18 @@ main(int argc, char *argv[])
> 		}
> 	}
> 
>+	/*
>+	 * Some krb5 routines try to scrape info out of files in the user's
>+	 * home directory. This can easily deadlock when that homedir is on a
>+	 * kerberized NFS mount. By setting $HOME unconditionally to "/", we
>+	 * prevent this behavior in routines that use $HOME in preference to
>+	 * the results of getpw*.
>+	 */
>+	if (setenv("HOME", "/", 1)) {
>+		printerr("Unable to set $HOME: %s\n", strerror(errno));
>+		exit(1);
>+	}
>+
> 	i = 0;
> 	ccachesearch[i++] = strtok(ccachedir, ":");
> 	do {
>-- 
>1.8.4.2
>

Actions: View | Diff

Attachments on bug 1052902: 849887 | 849890 | 853423 | 853860