On Tue Jul  5 03:19:09 JST 2005, Russ Cox wrote:
> Since the client name isn't
> authenticated at all, suid == cuid.

I see.  tickauthreply() in auth/authsrv.c has the following lines:

        safecpy(t.cuid, tr->uid, sizeof t.cuid);
        safecpy(t.suid, tr->uid, sizeof t.suid);

Thanks.
-- 


Reply via email to