From 2a2acf694e4d7c50b6af436b258056eff206f752 Mon Sep 17 00:00:00 2001 From: Dave West Date: Thu, 17 Jul 2008 10:54:00 +0000 Subject: [PATCH] The user with number 1 is no longer automatically an Aide. Plugs that little security hole that an attacker would need to be very quick to exploit. NB. If the system Aide is not correct in the config the Aide may loose priviledges and will need to run setup to get them back. --- citadel/user_ops.c | 5 ----- 1 file changed, 5 deletions(-) diff --git a/citadel/user_ops.c b/citadel/user_ops.c index a7504f0e4..b9f0c400e 100644 --- a/citadel/user_ops.c +++ b/citadel/user_ops.c @@ -1063,11 +1063,6 @@ int create_user(char *newusername, int become_user) /* fetch a new user number */ usbuf.usernum = get_new_user_number(); - /* The very first user created on the system will always be an Aide */ - if (usbuf.usernum == 1L) { - usbuf.axlevel = 6; - } - /* add user to the database */ putuser(&usbuf); cdb_store(CDB_USERSBYNUMBER, &usbuf.usernum, sizeof(long), usbuf.fullname, strlen(usbuf.fullname)+1); -- 2.39.2