Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 10 Mar 2007 03:49:46 +0100
From:      Pawel Jakub Dawidek <pjd@FreeBSD.org>
To:        Tom Rhodes <trhodes@FreeBSD.org>
Cc:        cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/usr.sbin/daemon daemon.8 daemon.c
Message-ID:  <20070310024946.GC1246@garage.freebsd.pl>
In-Reply-To: <200703090933.l299XJAP094201@repoman.freebsd.org>
References:  <200703090933.l299XJAP094201@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--R+My9LyyhiUvIEro
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Mar 09, 2007 at 09:33:19AM +0000, Tom Rhodes wrote:
> trhodes     2007-03-09 09:33:19 UTC
>=20
>   FreeBSD src repository
>=20
>   Modified files:
>     usr.sbin/daemon      daemon.8 daemon.c=20
>   Log:
>   Add support for dropping privileges to a specified user and/or group.
>  =20
>   PR:             108523
>   Submitted by:   Dmitri Alenitchev <dmitri@dworlds.ru> (original version)
>   Reviewed by:    mpp (first reply to PR)
[...]
> +	if (user || group) {
> +		if (getuid() !=3D 0)
> +			errx(1, "only root user is allowed to chroot "
> +			    "and change UID/GID");
> +		restrict_process(user, group);
> +	}

chroot?

--=20
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd@FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

--R+My9LyyhiUvIEro
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)

iD8DBQFF8hzKForvXbEpPzQRAusWAKDvVWxuF4z5vUAY56nqEAQVIFRKSgCdHKrv
xU/tezaHqLVO/uZBP/co6j0=
=ZCuy
-----END PGP SIGNATURE-----

--R+My9LyyhiUvIEro--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070310024946.GC1246>