summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2013-08-23 14:23:33 -0400
committerJakub Hrozek <jhrozek@redhat.com>2013-08-27 17:01:34 +0200
commitfe1afaccc7c9a99df823a7c44cd89fc3c619715a (patch)
tree5e27591b4b17d40f17ef3184334cf7a3e349d93b
parentd9816ac73176ee1f4d9c1fbf4861918d01dda798 (diff)
downloadsssd-fe1afaccc7c9a99df823a7c44cd89fc3c619715a.tar.gz
sssd-fe1afaccc7c9a99df823a7c44cd89fc3c619715a.tar.xz
sssd-fe1afaccc7c9a99df823a7c44cd89fc3c619715a.zip
KRB5: Remove unnecessary call to become_user()
By the time that the create_ccache_in_dir() routine is called, we are already guaranteed to have dropped privileges. This has either happened because we dropped them before the exec() in the normal operation case or because we dropped them explicitly after we completed the TGT validation step if that or FAST is configured.
-rw-r--r--src/providers/krb5/krb5_child.c6
1 files changed, 0 insertions, 6 deletions
diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c
index 8fce600fe..3fd12fec3 100644
--- a/src/providers/krb5/krb5_child.c
+++ b/src/providers/krb5/krb5_child.c
@@ -722,12 +722,6 @@ create_ccache_in_dir(uid_t uid, gid_t gid,
return EIO;
}
- kerr = become_user(uid, gid);
- if (kerr != EOK) {
- DEBUG(SSSDBG_CRIT_FAILURE, ("become_user failed.\n"));
- goto done;
- }
-
if (dirname[0] == ':') {
/* Cache name in the form of DIR::filepath represents a single
* ccache in a collection that we are trying to reuse.