Re: Move auth_approval in su.c before fork is lost due to pledge?

2017-01-13 Thread Todd C. Miller
One change with this diff is that the approval script will run as the invoking user, not the target user. I'm not sure that really makes a difference though. - todd

Re: Move auth_approval in su.c before fork is lost due to pledge?

2017-01-13 Thread Todd C. Miller
On 07 Jan 2017 21:14:17 -0700, "Andy Bradford" wrote: > As it turns out, it is because I have an approve entry in > /etc/login.conf and this requires the ability to fork the approval > program. When su tries to run approve it fails and I find the following > in dmesg: > >

Move auth_approval in su.c before fork is lost due to pledge?

2017-01-07 Thread Andy Bradford
Hello, I noticed that my locate.database wasn't being updated: Rebuilding locate database: Abort trap Not installing locate database; zero size >From the following: echo "${UPDATEDB} --fcodes=- --tmpdir=${TMPDIR:-/tmp}" | \ nice -5 su -m nobody 2>/dev/null