$NetBSD: patch-aq,v 1.1 2006/08/09 17:58:09 salo Exp $ Security fix for SA21436. --- lib/roken/iruserok.c.orig 2005-04-12 13:28:54.000000000 +0200 +++ lib/roken/iruserok.c 2006-08-09 19:42:15.000000000 +0200 @@ -250,7 +250,8 @@ again: * are protected read/write owner only. */ uid = geteuid(); - seteuid(pwd->pw_uid); + if (seteuid(pwd->pw_uid) < 0) + return (-1); hostf = fopen(pbuf, "r"); seteuid(uid);