summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFlorian Obser <florian@cvs.openbsd.org>2017-03-23 12:59:33 +0000
committerFlorian Obser <florian@cvs.openbsd.org>2017-03-23 12:59:33 +0000
commitb76482c658f350eb13e2fe07cd171d549c0a9ea8 (patch)
tree7bc597c04725b0e21481e1379fa4a8c193e3e5f0
parentde20ac70f750d3df1ecd4ee78e7629a31aca0b7d (diff)
It is perfectly valid to have a cert / key not owned by root; remove
useless check. OK benno
-rw-r--r--usr.sbin/acme-client/parse.y6
1 files changed, 1 insertions, 5 deletions
diff --git a/usr.sbin/acme-client/parse.y b/usr.sbin/acme-client/parse.y
index 1595b52a752..d40c8e90ba2 100644
--- a/usr.sbin/acme-client/parse.y
+++ b/usr.sbin/acme-client/parse.y
@@ -1,4 +1,4 @@
-/* $OpenBSD: parse.y,v 1.16 2017/01/24 12:53:52 deraadt Exp $ */
+/* $OpenBSD: parse.y,v 1.17 2017/03/23 12:59:32 florian Exp $ */
/*
* Copyright (c) 2016 Kristaps Dzonsons <kristaps@bsd.lv>
@@ -1034,10 +1034,6 @@ conf_check_file(char *s, int dontstat)
warn("cannot stat %s", s);
return (0);
}
- if (st.st_uid != 0 && st.st_uid != getuid()) {
- warnx("%s: owner not root or current user", s);
- return (0);
- }
if (st.st_mode & (S_IRWXG | S_IRWXO)) {
warnx("%s: group read/writable or world read/writable", s);
return (0);