From: Anders Kaseorg <andersk@mit.edu>
Date: Sun, 22 Aug 2010 08:43:09 +0000 (-0400)
Subject: Remove redundant test for MAGIC_LOCAL_GROUPNAME membership
X-Git-Tag: 2.0~8
X-Git-Url: http://andersk.mit.edu/gitweb/nss_nonlocal.git/commitdiff_plain/b0d4333dde25463ba3bc69022f5a9347117fc1f7

Remove redundant test for MAGIC_LOCAL_GROUPNAME membership

check_nonlocal_gid already stops users from getting into
MAGIC_LOCAL_GROUPNAME from nonlocal reasons.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
---

diff --git a/nonlocal-group.c b/nonlocal-group.c
index 987b58e..63f7e46 100644
--- a/nonlocal-group.c
+++ b/nonlocal-group.c
@@ -390,13 +390,6 @@ _nss_nonlocal_initgroups_dyn(const char *user, gid_t group, long int *start,
 	if (i < out)
 	    continue;
 
-	/* Don't let users get into MAGIC_LOCAL_GROUPNAME from nonlocal reasons. */
-	if (local_users_gid == (*groupsp)[in]) {
-	    syslog(LOG_WARNING, "nss_nonlocal: Nonlocal user %s removed from special local users group %s",
-		   user, MAGIC_LOCAL_GROUPNAME);
-	    continue;
-	}
-
 	status = check_nonlocal_gid(user, (*groupsp)[in], &nonlocal_errno);
 	if (status == NSS_STATUS_SUCCESS) {
 	    (*groupsp)[out++] = (*groupsp)[in];