crtxcr/exile.h
1
0
Fork 0
程式碼 問題 14 合併請求 1 版本發布 Wiki 動態

only chdir to / by default when actually chrooting and no dir given

瀏覽代碼
This commit is contained in:
Albert S. 2019-12-07 23:44:55 +01:00
父節點 ff2bc24c6b
當前提交 60776be416
共有 1 個檔案被更改，包括 8 行新增 和 2 行删除
顯示統計資料 下載 Patch 檔 下載差異檔 展開所有檔案 折疊所有檔案

10
qssb.h
查看文件

@ -119,7 +119,7 @@ struct qssb_policy *qssb_init_policy()
result->not_dumpable = 1; result->not_dumpable = 1;
result->no_new_privs = 1; result->no_new_privs = 1;
result->namespace_options = QSSB_UNSHARE_MOUNT | QSSB_UNSHARE_USER; result->namespace_options = QSSB_UNSHARE_MOUNT | QSSB_UNSHARE_USER;
result->chdir_path = "/"; result->chdir_path = NULL;
result->chroot_target_path = NULL; result->chroot_target_path = NULL;
result->path_policies = NULL; result->path_policies = NULL;
return result; return result;
@ -526,10 +526,16 @@ int qssb_enable_policy(struct qssb_policy *policy)
QSSB_LOG_ERROR("chroot: failed to enter %s\n", policy->chroot_target_path); QSSB_LOG_ERROR("chroot: failed to enter %s\n", policy->chroot_target_path);
return -1; return -1;
} }
if(policy->chdir_path == NULL)
{
policy->chdir_path = "/";
}
} }
if(chdir(policy->chdir_path) < 0) if(policy->chdir_path != NULL && chdir(policy->chdir_path) < 0)
{ {
QSSB_LOG_ERROR("chdir to %s failed\n", policy->chdir_path);
return -1; return -1;
} }