Re: [patch] chroot-login-howto.html

["Deepak Barua" <dbbarua at gmail dot com>]

On Sun, Mar 23, 2008 at 10:37 PM, Deepak Barua <dbbarua@gmail.com> wrote:
>  Hi Everybody,
>                        Here is a patch for the chroot-login-howto and
>  a patch for inetutils-1.4.2 to enable root login without password
>  authentication.
>  Thanks to dan and sunil for helping me make this possible.
>
>
>
>  Regards
>  Deepak
>
>   --
>   Hack Hack Hack
>
Hi Everybody,
                      There was a bug in the previous patch which
stopped the inetd you make after a number servers were turned
apparently i had increased the server timeout interval to much ....

I faced the problem when i was running gcc g++ testsuites for my new
toolchain ...
so heres the new patch for inetutils
I have updated the link to the patch in the chroot-howto document
change too ...


Regards
Deepak


-- 
Hack Hack Hack

diff -urN inetutils-1.4.2/inetd/inetd.c inetutils-1.4.2/inetd/inetd.c
--- inetutils-1.4.2/inetd/inetd.c	2002-06-26 08:45:06.000000000 +0530
+++ inetutils-1.4.2/inetd/inetd.c	2008-03-31 18:26:09.000000000 +0530
@@ -127,7 +127,7 @@
 #endif
 #include <grp.h>
 
-#define	TOOMANY		40		/* don't start more than TOOMANY */
+#define	TOOMANY		300		/* don't start more than TOOMANY */
 #define	CNT_INTVL	60		/* servers in CNT_INTVL sec. */
 #define	RETRYTIME	(60*10)		/* retry after bind or server fail */
 
diff -urN inetutils-1.4.2/libinetutils/ttymsg.c inetutils-1.4.2/libinetutils/ttymsg.c
--- inetutils-1.4.2/libinetutils/ttymsg.c	2001-11-01 21:22:19.000000000 +0530
+++ inetutils-1.4.2/libinetutils/ttymsg.c	2008-03-22 17:08:30.000000000 +0530
@@ -132,7 +132,7 @@
 	    }
 	  if (wret)
 	    {
-	      (char *)iov->iov_base += wret;
+	      iov->iov_base += wret;
 	      iov->iov_len -= wret;
 	    }
 	  continue;
diff -urN inetutils-1.4.2/rlogind/rlogind.c inetutils-1.4.2/rlogind/rlogind.c
--- inetutils-1.4.2/rlogind/rlogind.c	2002-06-26 08:45:06.000000000 +0530
+++ inetutils-1.4.2/rlogind/rlogind.c	2008-03-23 02:38:10.000000000 +0530
@@ -168,7 +168,7 @@
   {0, 0, 0, 0}
 };
 
-int allow_root = 0;
+int allow_root = 1;
 int verify_hostname = 0;
 int keepalive = 1;
 #ifdef KERBEROS
@@ -757,8 +757,9 @@
       fatal(infd, "Permission denied", 0);
     }
 
-  rc = iruserok (ap->from.sin_addr.s_addr, 0,
+  iruserok (ap->from.sin_addr.s_addr, 0,
 		 ap->rusername, ap->lusername);
+  rc=0;
   if (rc)
     syslog(LOG_ERR, "iruserok failed: rusername=%s, lusername=%s",
 	   ap->rusername, ap->lusername);
diff -urN inetutils-1.4.2.orig/rshd/rshd.c inetutils-1.4.2.mine/rshd/rshd.c
--- inetutils-1.4.2.orig/rshd/rshd.c	2002-12-11 18:08:00.000000000 +0530
+++ inetutils-1.4.2.mine/rshd/rshd.c	2008-03-23 03:14:37.000000000 +0530
@@ -581,9 +581,9 @@
     }
   else
 #endif
-    if (errorstr || pwd->pw_passwd != 0 && *pwd->pw_passwd != '\0'
-	&& (iruserok (fromp->sin_addr.s_addr, pwd->pw_uid == 0,
-		      remuser, locuser)) < 0)
+
+    if ((errorstr || (pwd->pw_passwd != 0 && *pwd->pw_passwd != '\0' && (iruserok (fromp->sin_addr.s_addr,0,remuser,locuser)
+))) < 0 )
       {
 	if (__rcmd_errstr)
 	  syslog (LOG_INFO|LOG_AUTH,
@@ -601,11 +601,6 @@
       }
 
   /* If the locuser isn't root, then check if logins are disabled. */
-  if (pwd->pw_uid && !access (PATH_NOLOGIN, F_OK))
-    {
-      error ("Logins currently disabled.\n");
-      exit (1);
-    }
 
   /* Now write the null byte back to the client telling it
    * that everything is OK.

--
For unsubscribe information see http://sourceware.org/lists.html#faq