From a324853818fd75d7ec11c68de9d499f37228b26a Mon Sep 17 00:00:00 2001
From: Simo Sorce <simo@redhat.com>
Date: Mon, 14 Oct 2013 16:20:11 -0400
Subject: Allow arbitrary users to connect to a service
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The rpc.gssd daemon is changing to fork and change uid to the unprivileged
user it wants to authenticate, this means gssproxy needs to allow connection
from any euid. When this is done though, the trusted flag needs to be dropped,
if the connecting euid does not match the default trusted uid to prevent
improper impersonation.

Resolves: https://fedorahosted.org/gss-proxy/ticket/103
Reviewed-by: Günther Deschner <gdeschner@redhat.com
---
 proxy/src/gp_rpc_release_handle.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'proxy/src/gp_rpc_release_handle.c')

diff --git a/proxy/src/gp_rpc_release_handle.c b/proxy/src/gp_rpc_release_handle.c
index a9f5ee2..97fc896 100644
--- a/proxy/src/gp_rpc_release_handle.c
+++ b/proxy/src/gp_rpc_release_handle.c
@@ -25,8 +25,7 @@
 
 #include "gp_rpc_process.h"
 
-int gp_release_handle(struct gssproxy_ctx *gpctx,
-                      struct gp_service *gpsvc,
+int gp_release_handle(struct gp_call_ctx *gpcall,
                       union gp_rpc_arg *arg,
                       union gp_rpc_res *res)
 {
-- 
cgit