- (djm) [sshd.c] Ignore SIGXFSZ in preauth monitor child; can explode on

   lastlog writing on platforms with high UIDs; bz#2263

2 files changed, 8 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index d69e08ff..9478859a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+20140823
+ - (djm) [sshd.c] Ignore SIGXFSZ in preauth monitor child; can explode on
+   lastlog writing on platforms with high UIDs; bz#2263
+
 20140822
  - (djm) [configure.ac] include leading zero characters in OpenSSL version
    number; fixes test for unsupported versions
diff --git a/sshd.c b/sshd.c
index 481d0015..834240d3 100644
--- a/sshd.c
+++ b/sshd.c
@@ -647,6 +647,10 @@ privsep_preauth_child(void)
 		fatal("setgroups: %.100s", strerror(errno));
 	permanently_set_uid(privsep_pw);
 #endif
+
+#ifdef SIGXFSZ
+	signal(SIGXFSZ, SIG_IGN);
+#endif
 }
 
 static int