diff options
| author |   deraadt <deraadt@openbsd.org> | 2010-01-11 22:17:36 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2010-01-11 22:17:36 +0000 |
| commit | 2f9676f2b115b1720575e773567eae3f6a85b8a0 (patch) | |
| tree | 3f85adf9fbd327e8acfb2ac0b75e3ad841c93f34 /lib/libc | |
| parent | Fix wrong logic in error checking of buf_dynamic, found by pcc. (diff) | |
| download | wireguard-openbsd-2f9676f2b115b1720575e773567eae3f6a85b8a0.tar.xz wireguard-openbsd-2f9676f2b115b1720575e773567eae3f6a85b8a0.zip | |
encourage use of setreseuid(), and warn there are other privs; ok henning
Diffstat (limited to 'lib/libc')
| -rw-r--r-- | lib/libc/sys/chroot.2 | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/lib/libc/sys/chroot.2 b/lib/libc/sys/chroot.2 index c52df415b20..f6e13682b4f 100644 --- a/lib/libc/sys/chroot.2 +++ b/lib/libc/sys/chroot.2 @@ -1,4 +1,4 @@ -.\" $OpenBSD: chroot.2,v 1.14 2007/05/31 19:19:32 jmc Exp $ +.\" $OpenBSD: chroot.2,v 1.15 2010/01/11 22:17:36 deraadt Exp $ .\" $NetBSD: chroot.2,v 1.7 1995/02/27 12:32:12 cgd Exp $ .\" .\" Copyright (c) 1983, 1991, 1993 @@ -30,7 +30,7 @@ .\" .\" @(#)chroot.2 8.1 (Berkeley) 6/4/93 .\" -.Dd $Mdocdate: May 31 2007 $ +.Dd $Mdocdate: January 11 2010 $ .Dt CHROOT 2 .Os .Sh NAME @@ -74,16 +74,16 @@ is set to indicate an error. .Sh EXAMPLES The following example changes the root directory to .Va newroot , -sets the current directory to the new root, and drops any +sets the current directory to the new root, and drops some setuid privileges. +There may be other privileges which need to be dropped as well. .Bd -literal -offset indent #include <err.h> #include <unistd.h> if (chroot(newroot) != 0 || chdir("/") != 0) err(1, "%s", newroot); -seteuid(getuid()); -setuid(getuid()); +setreseuid(getuid(), getuid(), getuid()); .Ed .Sh ERRORS .Fn chroot |