d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

MFp4 @229486:

Browse Source 
Once PID is written to the pidfile, revoke all capability rights.
We just want to keep the pidfile open.

Reviewed by:	brooks
Sponsored by:	The FreeBSD Foundation
This commit is contained in:
Pawel Jakub Dawidek 2013-07-03 22:21:11 +00:00
parent fe5c716394
commit 4c7a48b7a9
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sbin/dhclient/dhclient.c
View File

@ -2363,8 +2363,13 @@ go_daemon(void)
if (daemon(1, 0) == -1)
error("daemon");
if (pidfile != NULL)
if (pidfile != NULL) {
pidfile_write(pidfile);
if (cap_rights_limit(pidfile_fileno(pidfile), CAP_NONE) < 0 &&
errno != ENOSYS) {
error("can't limit pidfile descriptor: %m");
}
}
/* we are chrooted, daemon(3) fails to open /dev/null */
if (nullfd != -1) {