diff options
| author | Denys Vlasenko <vda.linux@googlemail.com> | 2015-10-13 13:49:53 +0200 |
|---|---|---|
| committer | Denys Vlasenko <vda.linux@googlemail.com> | 2015-10-13 13:49:53 +0200 |
| commit | f7ad927c2059ef9cd1cd6befeb43f26b92f6369f (patch) | |
| tree | 14c58fbd8b7e656dfa644be841ab476c35f72733 /runit | |
| parent | bf74fb44977d9b90c51dba19c1fd7f071147d955 (diff) | |
| download | busybox-f7ad927c2059ef9cd1cd6befeb43f26b92f6369f.tar.gz | |
ftpd: make DIR parameter work for non-root too: chdir to it instead of chroot
Unfortunately, chroot() works only for root user, because of attacks
on setuid binaries (make DIR/lib/ld-linux.so a shell, hardlink to
a setuid binary, chroot to DIR, execute it and get root shell).
function old new delta
ftpd_main 2160 2180 +20
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'runit')
0 files changed, 0 insertions, 0 deletions