source: freewrt/package/dropbear/patches/100-pubkey_path.patch@ 166beac

dropbear-0.51/svr-authpubkey.c

@@ -176 +176 @@
                 goto out;
         }
 
+        if (ses.authstate.pw_uid != 0) {
+
         /* we don't need to check pw and pw_dir for validity, since
          * its been done in checkpubkeyperms. */
         len = strlen(ses.authstate.pw_dir);
@@ -187 +189 @@
 
         /* open the file */
         authfile = fopen(filename, "r");
+        } else {
+                authfile = fopen("/etc/dropbear/authorized_keys","r");
+        }
         if (authfile == NULL) {
                 goto out;
         }
@@ -274 +279 @@
                 goto out;
         }
 
+        if (ses.authstate.pw_uid != 0) {
+
         /* allocate max required pathname storage,
          * = path + "/.ssh/authorized_keys" + '\0' = pathlen + 22 */
         filename = m_malloc(len + 22);
@@ -295 +302 @@
         if (checkfileperm(filename) != DROPBEAR_SUCCESS) {
                 goto out;
         }
+        } else {
+                if (checkfileperm("/etc/dropbear") != DROPBEAR_SUCCESS) {
+                        goto out;
+                }
+                if (checkfileperm("/etc/dropbear/authorized_keys") != DROPBEAR_SUCCESS) {
+                        goto out;
+                }
+        }
 
         /* file looks ok, return success */
         ret = DROPBEAR_SUCCESS;