Date: Sat, 10 Mar 2007 03:49:46 +0100 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Tom Rhodes <trhodes@FreeBSD.org> Cc: cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/usr.sbin/daemon daemon.8 daemon.c Message-ID: <20070310024946.GC1246@garage.freebsd.pl> In-Reply-To: <200703090933.l299XJAP094201@repoman.freebsd.org>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --]
On Fri, Mar 09, 2007 at 09:33:19AM +0000, Tom Rhodes wrote:
> trhodes 2007-03-09 09:33:19 UTC
>
> FreeBSD src repository
>
> Modified files:
> usr.sbin/daemon daemon.8 daemon.c
> Log:
> Add support for dropping privileges to a specified user and/or group.
>
> PR: 108523
> Submitted by: Dmitri Alenitchev <dmitri@dworlds.ru> (original version)
> Reviewed by: mpp (first reply to PR)
[...]
> + if (user || group) {
> + if (getuid() != 0)
> + errx(1, "only root user is allowed to chroot "
> + "and change UID/GID");
> + restrict_process(user, group);
> + }
chroot?
--
Pawel Jakub Dawidek http://www.wheel.pl
pjd@FreeBSD.org http://www.FreeBSD.org
FreeBSD committer Am I Evil? Yes, I Am!
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)
iD8DBQFF8hzKForvXbEpPzQRAusWAKDvVWxuF4z5vUAY56nqEAQVIFRKSgCdHKrv
xU/tezaHqLVO/uZBP/co6j0=
=ZCuy
-----END PGP SIGNATURE-----
home |
help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070310024946.GC1246>