GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-10-10 08:12:03 +08:00
Code Issues Packages Projects Releases Wiki Activity

isolate: ensure calling chdir('/') after chroot

Browse Source 
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
This commit is contained in:
Nikos Mavrogiannopoulos
2026-01-02 16:58:18 +01:00
parent 8ddc9b6abd
commit da61847df9
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/isolate.c
+8
View File
@@ -69,6 +69,14 @@ void drop_privileges(struct worker_st *ws, main_server_st *s)
GETPCONFIG(s)->chroot_dir, strerror(e)); GETPCONFIG(s)->chroot_dir, strerror(e));
exit(EXIT_FAILURE); exit(EXIT_FAILURE);
} }
ret = chdir("/");
if (ret != 0) {
e = errno;
oclog(ws, LOG_ERR, "cannot chdir to '/': %s",
strerror(e));
exit(EXIT_FAILURE);
}
} }
if (GETPCONFIG(s)->gid != -1 && (getgid() == 0 || getegid() == 0)) { if (GETPCONFIG(s)->gid != -1 && (getgid() == 0 || getegid() == 0)) {