Date: Mon, 12 Mar 2007 11:53:59 -0500 From: Tom Rhodes <trhodes@FreeBSD.org> To: Pawel Jakub Dawidek <pjd@FreeBSD.org> Cc: cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/usr.sbin/daemon daemon.8 daemon.c Message-ID: <20070312115359.4c0ae0bf.trhodes@FreeBSD.org> In-Reply-To: <20070310024946.GC1246@garage.freebsd.pl> References: <200703090933.l299XJAP094201@repoman.freebsd.org> <20070310024946.GC1246@garage.freebsd.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 10 Mar 2007 03:49:46 +0100 Pawel Jakub Dawidek <pjd@FreeBSD.org> wrote: > On Fri, Mar 09, 2007 at 09:33:19AM +0000, Tom Rhodes wrote: > > trhodes 2007-03-09 09:33:19 UTC > > > > FreeBSD src repository > > > > Modified files: > > usr.sbin/daemon daemon.8 daemon.c > > Log: > > Add support for dropping privileges to a specified user and/or group. > > > > PR: 108523 > > Submitted by: Dmitri Alenitchev <dmitri@dworlds.ru> (original version) > > Reviewed by: mpp (first reply to PR) > [...] > > + if (user || group) { > > + if (getuid() != 0) > > + errx(1, "only root user is allowed to chroot " > > + "and change UID/GID"); > > + restrict_process(user, group); > > + } > > chroot? Typo, of course. And I'm sorry for the lateness in my reply here, and figured you should get a follow up. I've implemented the changes Robert has requested and sent him a patch for review. He's busy, but promised me he would look over it soon. Thanks, -- Tom Rhodes
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070312115359.4c0ae0bf.trhodes>