Read it and weep.

diff --git a/update/exec_002.c b/update/exec_002.c
index d492d92d1af6f7335eeff7b06406dd8de1425100..c9239a519e6b82d19717f31ad33574282999f893 100644 (file)
--- a/update/exec_002.c
+++ b/update/exec_002.c
@@ -27,7 +27,7 @@ static char *rcsid_exec_002_c = "$Header$";
 #include "update.h"
 
 extern CONNECTION conn;
-extern int code, errno, uid, log_priority;
+extern int code, errno, uid, log_priority, have_authorization;
 extern char *whoami;
 
 #if defined(vax) || defined(ibm032)
@@ -48,6 +48,10 @@ exec_002(str)
 #endif
     int n, pid;
 
+    if (!have_authorization) {
+       reject_call(MR_PERM);
+       return(0);
+    }
     if (config_lookup("noexec")) {
        code = EPERM;
        code = send_object(conn, (char *)&code, INTEGER_T);