From 8477aae1b9dcda8638eee276f60becc4c3fcf350 Mon Sep 17 00:00:00 2001
From: djm <djm>
Date: Tue, 23 Nov 2010 23:36:15 +0000
Subject: [PATCH]  - (djm) [loginrec.c] Relax permission requirement on btmp
 logs to allow    group read/write. ok dtucker@

---
 ChangeLog  | 2 ++
 loginrec.c | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 62c9c666..91e2c892 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,8 @@
 20101124
  - (dtucker) [platform.c session.c] Move the getluid call out of session.c and
    into the platform-specific code  Only affects SCO, tested by and ok tim@.
+ - (djm) [loginrec.c] Relax permission requirement on btmp logs to allow
+   group read/write. ok dtucker@
 
 20101122
  - (dtucker) Bug #1840: fix warning when configuring --with-ssl-engine, patch
diff --git a/loginrec.c b/loginrec.c
index 95f14c46..cccaa47a 100644
--- a/loginrec.c
+++ b/loginrec.c
@@ -1673,7 +1673,7 @@ record_failed_login(const char *username, const char *hostname,
 		    strerror(errno));
 		goto out;
 	}
-	if((fst.st_mode & (S_IRWXG | S_IRWXO)) || (fst.st_uid != 0)){
+	if((fst.st_mode & (S_IXGRP | S_IRWXO)) || (fst.st_uid != 0)){
 		logit("Excess permission or bad ownership on file %s",
 		    _PATH_BTMP);
 		goto out;
-- 
2.11.4.GIT