Treat MACHINE list membership info as public information.

diff --git a/server/qaccess.pc b/server/qaccess.pc
index f6ea10440852c5130a0022c421142f253bc3b4f4..1c745c3c2385f6c079bc3bf3545987d895938165 100644 (file)
--- a/server/qaccess.pc
+++ b/server/qaccess.pc
@@ -309,7 +309,8 @@ int access_vis_list_by_name(struct query *q, char *argv[], client *cl)
 /* access_member - allow user to access member of type "USER" and name matches
  * username, or to access member of type "KERBEROS" and the principal matches
  * the user, or to access member of type "LIST" and list is one that user is
- * on the acl of, or the list is visible.
+ * on the acl of, or the list is visible.  Allow anyone to look up list
+ * memberships of MACHINEs.
  */
 
 int access_member(struct query *q, char *argv[], client *cl)
@@ -329,6 +330,9 @@ int access_member(struct query *q, char *argv[], client *cl)
        return MR_SUCCESS;
     }
 
+  if (!strcmp(argv[0], "MACHINE") || !strcmp(argv[0], "RMACHINE"))
+    return MR_SUCCESS;  
+
   return MR_PERM;
 }