Age | Commit message (Collapse) | Author | Files | Lines |
|
This introduces one small functional change: if any of the groups in
`EXTRA_ADMIN_GROUPS` can’t be resolved using `getgrnam()`, an error will
now be thrown. Previously, it would be ignored.
Other than that, this introduces no functional changes and is just
intended as a code cleanup.
Signed-off-by: Philip Withnall <withnall@endlessm.com>
|
|
Based on work by Robert Ancell,
https://bugs.freedesktop.org/show_bug.cgi?id=40364
|
|
Don't read the file in the root process, instead fork, become the
calling user, then read the file and pipe it back to the parent process.
This protects against callers passing e.g. "/etc/shadow" as filename.
|
|
|
|
This makes the audit log have the right information
|
|
|