mischief/openbsd-src
1
0
Fork 0
mirror of https://github.com/openbsd/src.git synced 2025-01-10 06:47:55 -08:00
Code

chroot to pw_dir instead of the hard-coded /var/empty. Also make the

Browse Source 
chroot+chdir step look more like in the other privsep daemons.

OK tedu@
This commit is contained in:
reyk 2015-11-01 13:59:44 +00:00
parent ad9ee0ddab
commit 1835fe0e2d
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
usr.sbin/rebound/rebound.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: rebound.c,v 1.40 2015/10/30 15:44:12 tedu Exp $ */
/* $OpenBSD: rebound.c,v 1.41 2015/11/01 13:59:44 reyk Exp $ */
/*
* Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
*
@ -440,8 +440,10 @@ launch(const char *confname, int ud, int ld, int kq)
if (!(pwd = getpwnam("_rebound")))
logerr("getpwnam failed");
if (chroot("/var/empty") || chdir("/"))
if (chroot(pwd->pw_dir) == -1)
logerr("chroot failed (%d)", errno);
if (chdir("/") == -1)
logerr("chdir failed (%d)", errno);
setproctitle("worker");
EV_SET(&kev[0], parent, EVFILT_PROC, EV_ADD, NOTE_EXIT, 0, NULL);