| commit | f7ad927c2059ef9cd1cd6befeb43f26b92f6369f | [log] [tgz] |
|---|---|---|
| author | Denys Vlasenko <vda.linux@googlemail.com> | Tue Oct 13 13:49:53 2015 +0200 |
| committer | Denys Vlasenko <vda.linux@googlemail.com> | Tue Oct 13 13:49:53 2015 +0200 |
| tree | 14c58fbd8b7e656dfa644be841ab476c35f72733 | |
| parent | bf74fb44977d9b90c51dba19c1fd7f071147d955 [diff] |
ftpd: make DIR parameter work for non-root too: chdir to it instead of chroot Unfortunately, chroot() works only for root user, because of attacks on setuid binaries (make DIR/lib/ld-linux.so a shell, hardlink to a setuid binary, chroot to DIR, execute it and get root shell). function old new delta ftpd_main 2160 2180 +20 Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>