pkexec: enforce absolute shell paths (#422)
Reading /etc/shells file directly has the effect that comments are
parsed as well. If a user sets environment variable SHELL to a value
which matches one of these comments, it is passed through pkexec.
The shadow tools would not allow such a login shell, so be as strict
as shadow when it comes to parsing /etc/shell.
Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
Loading
Please register or sign in to comment