[PATCH] improved chroot handling

Tony Finch dot at dotat.at
Thu Jun 27 09:54:39 EST 2002


On Wed, Jun 26, 2002 at 06:26:42PM -0500, Ben Lindstrom wrote:
> 
> No chdir("/").. Bad form.
> Trusting where the current path is without an explicist chdir() before it
> is also bad form.

That function is only called from one place shortly after the chdir into
the secure directory. The unusual ordering is to avoid passing around lots
of extraneous information.

> Hard coded directories that one has to sprawl through to find.  Also
> in very bad taste.

I have an updated patch that fixes that, if anyone is interested.

Thanks for your comments.

Tony.
-- 
f.a.n.finch <dot at dotat.at> http://dotat.at/
NORTH UTSIRE SOUTH UTSIRE: WESTERLY VEERING NORTHWESTERLY 4 OR 5, OCCASIONALLY
6 LATER. SHOWERS. GOOD.



More information about the openssh-unix-dev mailing list