=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/su/su.c,v retrieving revision 1.74 retrieving revision 1.75 diff -c -r1.74 -r1.75 *** src/usr.bin/su/su.c 2019/06/19 16:26:27 1.74 --- src/usr.bin/su/su.c 2019/06/20 00:41:18 1.75 *************** *** 1,4 **** ! /* $OpenBSD: su.c,v 1.74 2019/06/19 16:26:27 millert Exp $ */ /* * Copyright (c) 1988 The Regents of the University of California. --- 1,4 ---- ! /* $OpenBSD: su.c,v 1.75 2019/06/20 00:41:18 deraadt Exp $ */ /* * Copyright (c) 1988 The Regents of the University of California. *************** *** 351,357 **** if (pledge("stdio rpath exec", NULL) == -1) err(1, "pledge"); ! if (pwd->pw_uid && auth_approval(as, lc, pwd->pw_name, "su") <= 0) auth_err(as, 1, "approval failure"); auth_close(as); --- 351,357 ---- if (pledge("stdio rpath exec", NULL) == -1) err(1, "pledge"); ! if (pwd->pw_uid && auth_approval(as, lc, pwd->pw_name, "su") == 0) auth_err(as, 1, "approval failure"); auth_close(as);