[Bug nss/27416] __nss_database_lookup2 ignores defconfig and alternate_name

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=27416

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |2.34
         Resolution|---                         |FIXED
              Flags|                            |security-
                 CC|                            |fweimer at redhat dot com
             Status|NEW                         |RESOLVED

--- Comment #3 from Florian Weimer <fweimer at redhat dot com> ---
Thanks for the suggestion.

Fixed for 2.34 using:

commit 9b456c5da968ee832ea4b2b73a18a5bf6d2118a6
Author: DJ Delorie <dj@redhat.com>
Date:   Mon Feb 15 21:34:23 2021 -0500

    nss: fix nss_database_lookup2's alternate handling [BZ #27416]

    __nss_database_lookup2's extra arguments were left unused in the
    nsswitch reloading patch set; this broke compat (default config
    ignored) and shadow files (secondary name ignored) which relies on
    these fallbacks.

    This patch adds in the previous behavior by correcting the
    initialization of the database list to reflect the fallbacks.  This
    means that the nss_database_lookup2 interface no longer needs to be
    passed the fallback info, so API and callers were adjusted.

    Since all callers needed to be edited anyway, the calls were changed
    from __nss_database_lookup2 to the faster __nss_database_get.  This
    was an intended optimization which was deferred during the initial
    lookup changes to avoid touching so many files.

    The test case verifies that compat targets work (passwd) and that the
    default configuration works (group).  Tested on x86-64.

-- 
You are receiving this mail because:
You are on the CC list for the bug.