summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavid Kalnischkies <david@kalnischkies.de>2015-11-28 16:09:42 +0100
committerDavid Kalnischkies <david@kalnischkies.de>2015-11-28 16:09:42 +0100
commit25ff0797da5bc59ad4c322c7f1ea25664be8a461 (patch)
tree1614fbb558de37aebf21ddc2c66ebcc0fc19c5b3
parentd29d27b5513735bdb0f77505f5124b1bed390a17 (diff)
disable privilege dropping for rsh/ssh method by default
ssh expects various configuration bits to be usable like known hosts, possibly keys and co. Setting this up needs some user work for probably not a whole lot of benefits, so instead of forcing it upon users on upgrade disable dropping for it by default. Closes: 806511
-rw-r--r--methods/rsh.cc4
1 files changed, 4 insertions, 0 deletions
diff --git a/methods/rsh.cc b/methods/rsh.cc
index 9d82a99e3..4d133951f 100644
--- a/methods/rsh.cc
+++ b/methods/rsh.cc
@@ -398,6 +398,10 @@ RSHMethod::RSHMethod(std::string const &pProg) : aptMethod(pProg.c_str(),"1.0",S
// ---------------------------------------------------------------------
bool RSHMethod::Configuration(std::string Message)
{
+ // enabling privilege dropping for this method requires configuration…
+ // … which is otherwise lifted straight from root, so use it by default.
+ _config->Set(std::string("Binary::") + Prog + "::APT::Sandbox::User", "");
+
if (aptMethod::Configuration(Message) == false)
return false;