upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-02-19 02:30:08 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
opnsense-src/lib/libc
History
Jamie Gritton fa55cb449b MFC jail: Change both root and working directories in jail_attach(2) 
jail_attach(2) performs an internal chroot operation, leaving it up to
the calling process to assure the working directory is inside the jail.

Add a matching internal chdir operation to the jail's root.  Also
ignore kern.chroot_allow_open_directories, and always disallow the
operation if there are any directory descriptors open.

Approved by:	so
Security:	CVE-2020-25582
Security:	FreeBSD-SA-21:05.jail_chdir
Reported by:    mjg
Approved by:    markj, kib

(cherry picked from commit d4380c0cdd)
(cherry picked from commit ca9ab8ea17748a1758701fde262cb272fb757989)
2021-03-02 19:49:13 +01:00
..
aarch64 src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
amd64 src: merge HardenedBSD releng/12.1 at 7b67f6bef7a6 2019-12-06 14:17:29 +01:00
arm src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
capability src: clean-cut move to release/11.1.0 2017-08-20 13:44:58 +02:00
compat-43 src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
db src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
gdtoa src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
gen src: merge HardenedBSD releng/12.1 at 7b67f6bef7a6 2019-12-06 14:17:29 +01:00
gmon src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
i386 src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
iconv src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
include src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
inet src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
isc src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
locale src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
md src: clean-cut move to release/11.1.0 2017-08-20 13:44:58 +02:00
mips src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
nameser src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
net src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
nls src: clean-cut move to release/11.1.0 2017-08-20 13:44:58 +02:00
posix1e src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
powerpc src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
powerpc64 src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
powerpcspe src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
quad src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
regex src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
resolv src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
riscv src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
rpc src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
secure Fix imprecise ordering of SSP canary initialization 2020-03-02 20:36:10 +01:00
softfloat src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
sparc64 src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
stdio src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
stdlib src: merge HardenedBSD releng/12.1 at 7b67f6bef7a6 2019-12-06 14:17:29 +01:00
stdtime src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
string src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
sys MFC jail: Change both root and working directories in jail_attach(2) 2021-03-02 19:49:13 +01:00
tests src: merge HardenedBSD releng/12.1 at 7b67f6bef7a6 2019-12-06 14:17:29 +01:00
uuid src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
x86 src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
xdr src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
yp src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
libc.ldscript src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
libc_nossp.ldscript src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
Makefile src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00
Makefile.depend src: clean-cut move to release/11.0.0 2016-10-03 12:28:21 +02:00
Versions.def src: clean-cut move to releng/12.1 2019-09-25 16:17:31 +02:00