From: Howard Chu <hyc@openldap.org>
Date: Fri, 21 Nov 2008 02:15:47 +0000 (+0000)
Subject: ITS#4750 only read LDAP_CONF_FILE if geteuid() != getuid()
X-Git-Tag: ACLCHECK_0~1067
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=0bd6ce10624f9bfcd464b9874ce15168de7c6b59;p=openldap

ITS#4750 only read LDAP_CONF_FILE if geteuid() != getuid()
---

diff --git a/libraries/libldap/init.c b/libraries/libldap/init.c
index 4109b7eb74..d61ec89fbf 100644
--- a/libraries/libldap/init.c
+++ b/libraries/libldap/init.c
@@ -18,6 +18,10 @@
 #include <stdio.h>
 #include <ac/stdlib.h>
 
+#ifdef HAVE_GETEUID
+#include <ac/unistd.h>
+#endif
+
 #include <ac/socket.h>
 #include <ac/string.h>
 #include <ac/ctype.h>
@@ -629,6 +633,12 @@ void ldap_int_initialize( struct ldapoptions *gopts, int *dbglvl )
 #endif
 
 	openldap_ldap_init_w_sysconf(LDAP_CONF_FILE);
+
+#ifdef HAVE_GETEUID
+	if ( geteuid() != getuid() )
+		return;
+#endif
+
 	openldap_ldap_init_w_userconf(LDAP_USERRC_FILE);
 
 	{