Date: Sat, 10 Mar 2007 03:49:46 +0100 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Tom Rhodes <trhodes@FreeBSD.org> Cc: cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/usr.sbin/daemon daemon.8 daemon.c Message-ID: <20070310024946.GC1246@garage.freebsd.pl> In-Reply-To: <200703090933.l299XJAP094201@repoman.freebsd.org> References: <200703090933.l299XJAP094201@repoman.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--R+My9LyyhiUvIEro Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Mar 09, 2007 at 09:33:19AM +0000, Tom Rhodes wrote: > trhodes 2007-03-09 09:33:19 UTC >=20 > FreeBSD src repository >=20 > Modified files: > usr.sbin/daemon daemon.8 daemon.c=20 > Log: > Add support for dropping privileges to a specified user and/or group. > =20 > PR: 108523 > Submitted by: Dmitri Alenitchev <dmitri@dworlds.ru> (original version) > Reviewed by: mpp (first reply to PR) [...] > + if (user || group) { > + if (getuid() !=3D 0) > + errx(1, "only root user is allowed to chroot " > + "and change UID/GID"); > + restrict_process(user, group); > + } chroot? --=20 Pawel Jakub Dawidek http://www.wheel.pl pjd@FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! --R+My9LyyhiUvIEro Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (FreeBSD) iD8DBQFF8hzKForvXbEpPzQRAusWAKDvVWxuF4z5vUAY56nqEAQVIFRKSgCdHKrv xU/tezaHqLVO/uZBP/co6j0= =ZCuy -----END PGP SIGNATURE----- --R+My9LyyhiUvIEro--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070310024946.GC1246>