From 1c5093bbbc520dad83f1c6a2b3baffaf633e18c0 Mon Sep 17 00:00:00 2001 From: Jacques Vidrine Date: Mon, 3 Dec 2001 00:51:47 +0000 Subject: [PATCH] Do not pass user-defined environmental variables to /usr/bin/login. Obtained from: OpenBSD Approved by: green --- crypto/openssh/session.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/crypto/openssh/session.c b/crypto/openssh/session.c index 2a725ea22cf..f5e0811f55a 100644 --- a/crypto/openssh/session.c +++ b/crypto/openssh/session.c @@ -1154,6 +1154,7 @@ do_child(Session *s, const char *command) child_set_env(&env, &envsize, "TZ", getenv("TZ")); /* Set custom environment options from RSA authentication. */ + if (!options.use_login) { while (custom_environment) { struct envstring *ce = custom_environment; char *s = ce->s; @@ -1167,6 +1168,7 @@ do_child(Session *s, const char *command) xfree(ce->s); xfree(ce); } + } snprintf(buf, sizeof buf, "%.50s %d %d", get_remote_ipaddr(), get_remote_port(), get_local_port());