Changeset 882 for server/common/oursrc

Timestamp:

Nov 16, 2008, 10:06:32 PM (17 years ago)

Author:

geofft

Message:

Log when using superuser rights to ssh directly to a locker

File:

• server/common/oursrc/accountadm/admof.c (modified) (2 diffs)

server/common/oursrc/accountadm/admof.c

@@ -29 +29 @@
 #include <kerberosIV/krb.h>
 #include <stdbool.h>
+#include <syslog.h>
 
 extern int pioctl(char *, afs_int32, struct ViceIoctl *, afs_int32);
@@ -211 +212 @@
     rights &= ~parse_rights(nminus, &p, user);
 #ifdef OVERLORDS
-    if (~rights & PRSFS_ADMINISTER && ismember(user, OVERLORDS))
+    if (~rights & PRSFS_ADMINISTER && ismember(user, OVERLORDS)) {
+        openlog("admof", 0, LOG_AUTHPRIV);
+        syslog(LOG_NOTICE, "giving %s admin rights on %s", user, locker);
+        closelog();
         rights |= PRSFS_ADMINISTER;
+    }
 #endif