From b0d4333dde25463ba3bc69022f5a9347117fc1f7 Mon Sep 17 00:00:00 2001 From: Anders Kaseorg Date: Sun, 22 Aug 2010 04:43:09 -0400 Subject: [PATCH] Remove redundant test for MAGIC_LOCAL_GROUPNAME membership check_nonlocal_gid already stops users from getting into MAGIC_LOCAL_GROUPNAME from nonlocal reasons. Signed-off-by: Anders Kaseorg --- nonlocal-group.c | 7 ------- 1 file changed, 7 deletions(-) diff --git a/nonlocal-group.c b/nonlocal-group.c index 987b58e..63f7e46 100644 --- a/nonlocal-group.c +++ b/nonlocal-group.c @@ -390,13 +390,6 @@ _nss_nonlocal_initgroups_dyn(const char *user, gid_t group, long int *start, if (i < out) continue; - /* Don't let users get into MAGIC_LOCAL_GROUPNAME from nonlocal reasons. */ - if (local_users_gid == (*groupsp)[in]) { - syslog(LOG_WARNING, "nss_nonlocal: Nonlocal user %s removed from special local users group %s", - user, MAGIC_LOCAL_GROUPNAME); - continue; - } - status = check_nonlocal_gid(user, (*groupsp)[in], &nonlocal_errno); if (status == NSS_STATUS_SUCCESS) { (*groupsp)[out++] = (*groupsp)[in]; -- 2.45.0