...
The following compliant solution inserts the "--"
argument before the call to getenv("USER")
in the call to execl()
:
Code Block | ||
---|---|---|
| ||
(void) execl(LOGIN_PROGRAM, "login",
"-p",
"-d", slavename,
"-h", host,
"-s", pam_svc_name,
"--",
(AuthenticatingUser != NULL ? AuthenticatingUser :
getenv("USER")), 0);
|
...