openbsd-ports/net/rsync/patches/patch-authenticate_c
naddy 73f2e7d414 Update to 3.1.2: This is a bug-fix release. It includes a security
fix for a transfer from a sender that you don't fully trust.

Originally gonzalo@ submitted a broken update to espie@ who passed
it around and then everybody forgot.
2016-01-10 21:36:22 +00:00

13 lines
420 B
Plaintext

$OpenBSD: patch-authenticate_c,v 1.6 2016/01/10 21:36:22 naddy Exp $
--- authenticate.c.orig Mon Aug 24 20:54:00 2015
+++ authenticate.c Tue Dec 22 21:23:23 2015
@@ -350,7 +350,7 @@ void auth_client(int fd, const char *user, const char
char pass2[MAX_DIGEST_LEN*2];
if (!user || !*user)
- user = "nobody";
+ user = "_rsync";
if (!(pass = getpassf(password_file))
&& !(pass = getenv("RSYNC_PASSWORD"))) {