projects / oweals / busybox.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bf74fb4) | patch
ftpd: make DIR parameter work for non-root too: chdir to it instead of chroot
authorDenys Vlasenko <vda.linux@googlemail.com>
Tue, 13 Oct 2015 11:49:53 +0000 (13:49 +0200)
committerDenys Vlasenko <vda.linux@googlemail.com>
Tue, 13 Oct 2015 11:49:53 +0000 (13:49 +0200)
commitf7ad927c2059ef9cd1cd6befeb43f26b92f6369f
tree14c58fbd8b7e656dfa644be841ab476c35f72733tree | snapshot
parentbf74fb44977d9b90c51dba19c1fd7f071147d955commit | diff
ftpd: make DIR parameter work for non-root too: chdir to it instead of chroot

Unfortunately, chroot() works only for root user, because of attacks
on setuid binaries (make DIR/lib/ld-linux.so a shell, hardlink to
a setuid binary, chroot to DIR, execute it and get root shell).

function                                             old     new   delta
ftpd_main                                           2160    2180     +20

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
networking/ftpd.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.