From 7134af9fdb194ae8291775fed78cd1a82eaaa41b Mon Sep 17 00:00:00 2001
From: Werner Koch <wk@gnupg.org>
Date: Mon, 1 Dec 2003 10:54:09 +0000
Subject: * scdaemon.c, scdaemon.h: New options --allow-admin and --deny-admin.
 * app-openpgp.c (verify_chv3): Check it here.

---
 scd/app-openpgp.c | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'scd/app-openpgp.c')

diff --git a/scd/app-openpgp.c b/scd/app-openpgp.c
index 07abf9bfb..6b4a2f7ef 100644
--- a/scd/app-openpgp.c
+++ b/scd/app-openpgp.c
@@ -569,6 +569,12 @@ verify_chv3 (APP app,
 {
   int rc = 0;
 
+  if (!opt.allow_admin)
+    {
+      log_info ("access to admin commands is not configured\n");
+      return gpg_error (GPG_ERR_EACCES);
+    }
+      
   if (!app->did_chv3) 
     {
       char *pinvalue;
-- 
cgit v1.2.3