lab/icbd
7
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Chroot the logger process into the icbd user home directory

Browse Source
This commit is contained in:
Mike Belopuhov 2014-03-05 18:38:50 +01:00
parent 4e66b3ae9b
commit 1dd35547d8
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
logger.c
View File

@ -97,12 +97,17 @@ logger_init(void)
LOGIN_SETALL & ~LOGIN_SETUSER) < 0)
exit(EX_NOPERM);
if (chroot(pw->pw_dir) < 0) {
syslog(LOG_ERR, "%s: %m", pw->pw_dir);
exit(EX_UNAVAILABLE);
}
if (setuid(pw->pw_uid) < 0) {
syslog(LOG_ERR, "%d: %m", pw->pw_uid);
exit(EX_NOPERM);
}
if (chdir(pw->pw_dir) < 0) {
if (chdir("/") < 0) {
syslog(LOG_ERR, "chdir: %m");
exit(EX_UNAVAILABLE);
}