X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/blobdiff_plain/d999d312c488098f42a5a4b3f0f7aa727c93dee9..ac669e8b922c7ace230294f9bf9a3a2bdfbd19d2:/authenticate.c diff --git a/authenticate.c b/authenticate.c index 12f142ec..ff7eef2c 100644 --- a/authenticate.c +++ b/authenticate.c @@ -21,7 +21,6 @@ #include "rsync.h" extern char *password_file; -extern int am_root; /*************************************************************************** encode a buffer using base64 - simple and slow algorithm. null terminates @@ -90,13 +89,13 @@ static int get_secret(int module, char *user, char *secret, int len) return 0; if (do_stat(fname, &st) == -1) { - rsyserr(FLOG, errno, "stat(%s)", safe_fname(fname)); + rsyserr(FLOG, errno, "stat(%s)", fname); ok = 0; } else if (lp_strict_modes(module)) { if ((st.st_mode & 06) != 0) { rprintf(FLOG, "secrets file must not be other-accessible (see strict modes option)\n"); ok = 0; - } else if (am_root && (st.st_uid != 0)) { + } else if (MY_UID() == 0 && st.st_uid != 0) { rprintf(FLOG, "secrets file must be owned by root when running as root (see strict modes)\n"); ok = 0; } @@ -160,19 +159,19 @@ static char *getpassf(char *filename) if ((fd = open(filename,O_RDONLY)) < 0) { rsyserr(FERROR, errno, "could not open password file \"%s\"", - safe_fname(filename)); + filename); if (envpw) rprintf(FERROR, "falling back to RSYNC_PASSWORD environment variable.\n"); return NULL; } if (do_stat(filename, &st) == -1) { - rsyserr(FERROR, errno, "stat(%s)", safe_fname(filename)); + rsyserr(FERROR, errno, "stat(%s)", filename); ok = 0; } else if ((st.st_mode & 06) != 0) { rprintf(FERROR,"password file must not be other-accessible\n"); ok = 0; - } else if (am_root && st.st_uid != 0) { + } else if (MY_UID() == 0 && st.st_uid != 0) { rprintf(FERROR,"password file must be owned by root when running as root\n"); ok = 0; }