- (djm) [loginrec.c] Relax permission requirement on btmp logs to allow

   group read/write. ok dtucker@

diff --git a/ChangeLog b/ChangeLog
index 62c9c6666c2a30d02da6e9710f109a834599145d..91e2c892a22a57f7cc930ac498959c9acfc71e1f 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,8 @@
 20101124
  - (dtucker) [platform.c session.c] Move the getluid call out of session.c and
    into the platform-specific code  Only affects SCO, tested by and ok tim@.
+ - (djm) [loginrec.c] Relax permission requirement on btmp logs to allow
+   group read/write. ok dtucker@
 
 20101122
  - (dtucker) Bug #1840: fix warning when configuring --with-ssl-engine, patch

diff --git a/loginrec.c b/loginrec.c
index 95f14c46fff2df1963f55134979986b89ec6aecd..cccaa47ae35de9f35450bbe7d580b89ba9cb45a0 100644 (file)
--- a/loginrec.c
+++ b/loginrec.c
@@ -1673,7 +1673,7 @@ record_failed_login(const char *username, const char *hostname,
                    strerror(errno));
                goto out;
        }
-       if((fst.st_mode & (S_IRWXG | S_IRWXO)) || (fst.st_uid != 0)){
+       if((fst.st_mode & (S_IXGRP | S_IRWXO)) || (fst.st_uid != 0)){
                logit("Excess permission or bad ownership on file %s",
                    _PATH_BTMP);
                goto out;