mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-03 08:05:21 +00:00
Code Issues Releases Wiki Activity

1838. [cleanup] Don't allow Linux capabilities to be inherited.

Browse Source 
[RT #13707]
This commit is contained in:
Mark Andrews
2005-05-20 01:37:03 +00:00
parent 3b4405aba9
commit bb99a72b21
3 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@@ -71,7 +71,8 @@
1839. [bug] <isc/hash.h> was not being installed. 1839. [bug] <isc/hash.h> was not being installed.
1838. [placeholder] rt13707 1838. [cleanup] Don't allow Linux capabilities to be inherited.
[RT #13707]
1837. [bug] Compile time option ISC_FACILITY was not effective 1837. [bug] Compile time option ISC_FACILITY was not effective
for 'named -u <user>'. [RT #13714] for 'named -u <user>'. [RT #13714]

4
bin/named/unix/os.c
View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE. * PERFORMANCE OF THIS SOFTWARE.
*/ */
/* $Id: os.c,v 1.74 2005/04/27 04:56:02 sra Exp $ */ /* $Id: os.c,v 1.75 2005/05/20 01:37:03 marka Exp $ */
/*! \file */ /*! \file */
@@ -164,7 +164,7 @@ linux_setcaps(unsigned int caps) {
memset(&cap, 0, sizeof(cap)); memset(&cap, 0, sizeof(cap));
cap.effective = caps; cap.effective = caps;
cap.permitted = caps; cap.permitted = caps;
cap.inheritable = caps; cap.inheritable = 0;
if (syscall(SYS_capset, &caphead, &cap) < 0) { if (syscall(SYS_capset, &caphead, &cap) < 0) {
isc__strerror(errno, strbuf, sizeof(strbuf)); isc__strerror(errno, strbuf, sizeof(strbuf));
ns_main_earlyfatal("capset failed: %s:" ns_main_earlyfatal("capset failed: %s:"

4
doc/private/branches
View File

@@ -32,8 +32,8 @@ rt13587 review
rt13606 open marka // TSIG SHA256 rt13606 open marka // TSIG SHA256
rt13662 new rt13662 new
rt13694 new rt13694 new
rt13707 new rt13707 closed
rt13714 13714 rt13714 closed
rt13753 new rt13753 new
rt13754 new rt13754 new
rt13771 new rt13771 new