From: Dave West <davew@uncensored.citadel.org>
Date: Thu, 17 Jul 2008 10:54:00 +0000 (+0000)
Subject: The user with number 1 is no longer automatically an Aide.
X-Git-Tag: v7.86~2090
X-Git-Url: https://code.citadel.org/?a=commitdiff_plain;h=2a2acf694e4d7c50b6af436b258056eff206f752;p=citadel.git

The user with number 1 is no longer automatically an Aide.
Plugs that little security hole that an attacker would need to be very
quick to exploit.
NB. If the system Aide is not correct in the config the Aide may loose
priviledges and will need to run setup to get them back.
---

diff --git a/citadel/user_ops.c b/citadel/user_ops.c
index a7504f0e4..b9f0c400e 100644
--- a/citadel/user_ops.c
+++ b/citadel/user_ops.c
@@ -1063,11 +1063,6 @@ int create_user(char *newusername, int become_user)
 	/* fetch a new user number */
 	usbuf.usernum = get_new_user_number();
 
-	/* The very first user created on the system will always be an Aide */
-	if (usbuf.usernum == 1L) {
-		usbuf.axlevel = 6;
-	}
-
 	/* add user to the database */
 	putuser(&usbuf);
 	cdb_store(CDB_USERSBYNUMBER, &usbuf.usernum, sizeof(long), usbuf.fullname, strlen(usbuf.fullname)+1);