ud-generate: refuse to run as root

diff --git a/debian/changelog b/debian/changelog
index 42a1d86..dd64722 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -16,12 +16,13 @@ userdir-ldap (0.3.7X) Xnstable; urgency=low
     - Keyring Maintainers ldap group gets to write to the keyFingerPrint
       attribute.
     - sshrsaauthkey is no longer compareable by *.
+  * ud-generate: refuse to run as root.
 
   [ Stephen Gran ]
   * Add txt record support to ud-mailgate
   * Clean up addition of identifying txt records to debian.net slightly
 
- -- Peter Palfrader <weasel@debian.org>  Tue, 01 Jun 2010 17:22:13 +0200
+ -- Peter Palfrader <weasel@debian.org>  Fri, 30 Jul 2010 19:46:48 +0200
 
 userdir-ldap (0.3.76) unstable; urgency=low
 

diff --git a/ud-generate b/ud-generate
index 2951794..fc6dbb2 100755 (executable)
--- a/ud-generate
+++ b/ud-generate
@@ -39,6 +39,10 @@ except ImportError:
 global Allowed
 global CurrentHost
 
+if os.getuid() == 0:
+   sys.stderr.write("You should probably not run ud-generate as root.\n")
+   sys.exit(1)
+
 PasswdAttrs = None
 DebianUsers = None
 DisabledUsers = []