Changeset 1dd3554 in code

Timestamp:

Mar 5, 2014, 5:39:17 PM (11 years ago)

Author:

Mike Belopuhov <mike@…>

Branches:

master

Children:

b28dd0e

Parents:

4e66b3a

git-author:

Mike Belopuhov <mike@…> (03/05/14 17:38:50)

git-committer:

Mike Belopuhov <mike@…> (03/05/14 17:39:17)

Message:

Chroot the logger process into the icbd user home directory

File:

• logger.c (modified) (2 diffs)

logger.c

@@ -98 +98 @@
                 exit(EX_NOPERM);
 
+        if (chroot(pw->pw_dir) < 0) {
+                syslog(LOG_ERR, "%s: %m", pw->pw_dir);
+                exit(EX_UNAVAILABLE);
+        }
+
         if (setuid(pw->pw_uid) < 0) {
                 syslog(LOG_ERR, "%d: %m", pw->pw_uid);
@@ -103 +108 @@
         }
 
-        if (chdir(pw->pw_dir) < 0) {
+        if (chdir("/") < 0) {
                 syslog(LOG_ERR, "chdir: %m");
                 exit(EX_UNAVAILABLE);