diff options
| author | Kyle Evans <kevans@FreeBSD.org> | 2024-08-05 18:43:56 +0000 |
|---|---|---|
| committer | Ed Maste <emaste@FreeBSD.org> | 2024-09-04 20:31:04 +0000 |
| commit | d94dbaa516e0c7fb05a52f1c76020165482b7bf0 (patch) | |
| tree | ec94a1ed3191ad601ce50b5582899670d2969b80 /include | |
| parent | 9020582c32ed0901385ef706fd96db0ad8f629b0 (diff) | |
calendar: don't setlogin(2) in the -a user handlers
As of e67975d331 ("Fix 'calendar -a' in several ways."), `calendar -a`
will now fork off a new process for each user and do all of its own
processing in the user's own context.
As a side-effect, calendar(1) started calling setlogin(2) in each of the
forked processes and inadvertently hijacked the login name for the
session it was running under, which was typically not a fresh session
but rather that of whatever cron/periodic run spawned it. Thus, daily
and security e-mails started coming from completely arbitrary user.
We could create a new session, but it appears that nothing calendar(1)
does really needs the login name to be clobbered; opt to just avoid the
setlogin(2) call entirely rather than incur the overhead of a new
session for each process.
PR: 280418
Reviewed by: des, olce
Fixes: e67975d331 ("Fix 'calendar -a' in several ways.")
(cherry picked from commit 6cb8b61efe8899ee9194563108d0ae90c1eb89e3)
(cherry picked from commit 33708452aaabca205d81eceb83e0813e5882815c)
Approved by: so
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions
