little patch HEAD master

1 files changed, 12 insertions, 1 deletions

diff --git a/no_shell.c b/no_shell.c
index a06c10a..a4c2052 100644
--- a/no_shell.c
+++ b/no_shell.c
@@ -21,13 +21,24 @@ int main(void) {
     char choice = 0;
     scanf(" %c", &choice);
 
-    openlog("no_shell", LOG_PID | LOG_NDELAY, LOG_AUTH);
+    openlog("no_shell", LOG_PID | LOG_NDELAY, LOG_AUTHPRIV);
     syslog(LOG_NOTICE, "login attempt for %s", username);
     closelog();
 
     if (choice == 'y' || choice == 'Y') {
         printf("\nStarting password change for %s...\n\n", username);
         fflush(stdout);
+        setenv("PATH", "/usr/bin:/bin", 1);
+        unsetenv("IFS");
+        unsetenv("LD_PRELOAD");
+        unsetenv("LD_LIBRARY_PATH");
+        unsetenv("LD_AUDIT");
+        unsetenv("LD_DEBUG");
+        unsetenv("LD_ORIGIN_PATH");
+        unsetenv("LD_PROFILE");
+        unsetenv("LD_USE_LOAD_BIAS");
+        unsetenv("DYLD_INSERT_LIBRARIES");
+        unsetenv("DYLD_LIBRARY_PATH");
         execl("/usr/bin/passwd", "passwd", username, (char *)NULL);
         perror("execl");
         exit(1);