From: Christian Grothoff <christian@grothoff.org>
Date: Sat, 30 Nov 2019 22:32:03 +0000 (+0100)
Subject: disable NSS for root
X-Git-Tag: v0.12.0~58^2
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=56d7341763046244bce789f1355441345711958c;p=oweals%2Fgnunet.git

disable NSS for root
---

diff --git a/src/gns/nss/nss_gns_query.c b/src/gns/nss/nss_gns_query.c
index 4f5f06cfa..7b69282cb 100644
--- a/src/gns/nss/nss_gns_query.c
+++ b/src/gns/nss/nss_gns_query.c
@@ -63,6 +63,8 @@ gns_resolve_name (int af, const char *name, struct userdata *u)
   int out[2];
   pid_t pid;
 
+  if (0 == getuid ())
+    return -2; /* GNS via NSS is NEVER for root */
   if (0 != pipe (out))
     return -1;
   pid = fork ();
@@ -71,9 +73,9 @@ gns_resolve_name (int af, const char *name, struct userdata *u)
   if (0 == pid)
   {
     char *argv[] = { "gnunet-gns",
-                     "-r", //Raw output for easier parsing
+                     "-r", /* Raw output for easier parsing */
 #ifdef LSD001
-                     "-d", //DNS compatibility (allow IDNA names, no UTF-8)
+                     "-d", /* DNS compatibility (allow IDNA names, no UTF-8) */
 #endif
                      "-t",
                      (AF_INET6 == af) ? "AAAA" : "A",