2c12a2c32a
So far seteuid could change uid to any existing account, given sufficient permissions of the caller. This is kind of bad since it disallows admins to refuse login to disabled or locked out accounts. Add check for the account's UF_ACCOUNTDISABLE or UF_LOCKOUT flags and don't let the user in, if one of the flags is set. Signed-off-by: Corinna Vinschen <corinna@vinschen.de> |
||
|---|---|---|
| .. | ||
| 1.7.10 | ||
| 1.7.11 | ||
| 1.7.12 | ||
| 1.7.13 | ||
| 1.7.14 | ||
| 1.7.15 | ||
| 1.7.16 | ||
| 1.7.17 | ||
| 1.7.18 | ||
| 1.7.19 | ||
| 1.7.20 | ||
| 1.7.21 | ||
| 1.7.22 | ||
| 1.7.23 | ||
| 1.7.24 | ||
| 1.7.25 | ||
| 1.7.26 | ||
| 1.7.27 | ||
| 1.7.28 | ||
| 1.7.29 | ||
| 1.7.30 | ||
| 1.7.31 | ||
| 1.7.32 | ||
| 1.7.33 | ||
| 1.7.34 | ||
| 1.7.35 | ||
| 2.0.0 | ||
| 2.0.1 | ||
| 2.0.3 | ||
| 2.0.4 | ||
| 2.1.0 | ||
| 2.2.0 | ||
| 2.2.1 | ||
| 2.3.0 | ||
| 2.3.1 | ||
| 2.4.0 | ||
| 2.4.1 | ||
| 2.5.0 | ||
| 2.5.1 | ||
| 2.5.2 | ||
| 2.6.0 | ||
| 2.6.1 | ||
| 2.7.0 | ||
| 2.8.0 | ||
| 2.8.1 | ||
| 2.8.2 | ||
| 2.9.0 | ||
| 2.10.0 | ||
| 2.11.0 | ||
| 2.11.1 | ||
| 2.11.2 | ||
| 2.12.0 | ||