fix for a transfer from a sender that you don't fully trust. Originally gonzalo@ submitted a broken update to espie@ who passed it around and then everybody forgot.
13 lines
420 B
Plaintext
13 lines
420 B
Plaintext
$OpenBSD: patch-authenticate_c,v 1.6 2016/01/10 21:36:22 naddy Exp $
|
|
--- authenticate.c.orig Mon Aug 24 20:54:00 2015
|
|
+++ authenticate.c Tue Dec 22 21:23:23 2015
|
|
@@ -350,7 +350,7 @@ void auth_client(int fd, const char *user, const char
|
|
char pass2[MAX_DIGEST_LEN*2];
|
|
|
|
if (!user || !*user)
|
|
- user = "nobody";
|
|
+ user = "_rsync";
|
|
|
|
if (!(pass = getpassf(password_file))
|
|
&& !(pass = getenv("RSYNC_PASSWORD"))) {
|