upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-24 00:29:58 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- chdir to / after chroot call (suggested by Camiel Dobbelaar).

Browse source 
git-svn-id: file:///svn/unbound/trunk@2764 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2012-09-21 07:13:51 +00:00
parent b44780b22c
commit 1ade6965b2
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
daemon/unbound.c
View file

@ -539,6 +539,9 @@ perform_setup(struct daemon* daemon, struct config_file* cfg, int debug_mode,
if(chroot(cfg->chrootdir)) if(chroot(cfg->chrootdir))
fatal_exit("unable to chroot to %s: %s", fatal_exit("unable to chroot to %s: %s",
cfg->chrootdir, strerror(errno)); cfg->chrootdir, strerror(errno));
if(chdir("/"))
fatal_exit("unable to chdir to / in chroot %s: %s",
cfg->chrootdir, strerror(errno));
verbose(VERB_QUERY, "chroot to %s", cfg->chrootdir); verbose(VERB_QUERY, "chroot to %s", cfg->chrootdir);
if(strncmp(*cfgfile, cfg->chrootdir, if(strncmp(*cfgfile, cfg->chrootdir,
strlen(cfg->chrootdir)) == 0) strlen(cfg->chrootdir)) == 0)

3
doc/Changelog
View file

@ -1,3 +1,6 @@
21 September 2012: Wouter
- chdir to / after chroot call (suggested by Camiel Dobbelaar).
17 September 2012: Wouter 17 September 2012: Wouter
- patch_rsamd5_enable.diff: this patch enables RSAMD5 validation - patch_rsamd5_enable.diff: this patch enables RSAMD5 validation
otherwise it is treated as insecure. The RSAMD5 algorithm is otherwise it is treated as insecure. The RSAMD5 algorithm is