Remove redundant test for MAGIC_LOCAL_GROUPNAME membership

check_nonlocal_gid already stops users from getting into
MAGIC_LOCAL_GROUPNAME from nonlocal reasons.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

diff --git a/nonlocal-group.c b/nonlocal-group.c
index 987b58ed5b54f09cbbacd1c2d5a3d09346c81ebf..63f7e46960e76df76ec6bc07f8b999a6c93e0f46 100644 (file)
--- a/nonlocal-group.c
+++ b/nonlocal-group.c
@@ -390,13 +390,6 @@ _nss_nonlocal_initgroups_dyn(const char *user, gid_t group, long int *start,
        if (i < out)
            continue;
 
-       /* Don't let users get into MAGIC_LOCAL_GROUPNAME from nonlocal reasons. */
-       if (local_users_gid == (*groupsp)[in]) {
-           syslog(LOG_WARNING, "nss_nonlocal: Nonlocal user %s removed from special local users group %s",
-                  user, MAGIC_LOCAL_GROUPNAME);
-           continue;
-       }
-
        status = check_nonlocal_gid(user, (*groupsp)[in], &nonlocal_errno);
        if (status == NSS_STATUS_SUCCESS) {
            (*groupsp)[out++] = (*groupsp)[in];