mirror of
https://github.com/perlbot/perlbuut
synced 2025-06-07 19:26:05 -04:00
No longer use root, instead use cap_sys_chroot on perl
This commit is contained in:
parent
a0b16eb284
commit
a0de17ba45
1 changed files with 10 additions and 10 deletions
20
lib/eval.pl
20
lib/eval.pl
|
@ -210,11 +210,11 @@ use Storable qw/nfreeze/; nfreeze([]); #Preload Nfreeze since it's loaded on dem
|
|||
# that chroot will prevent, so do it here.
|
||||
setrlimit(RLIMIT_CPU, 10,10);
|
||||
|
||||
# Root Check
|
||||
if( $< != 0 )
|
||||
{
|
||||
die "Not root, can't chroot or take other precautions, dying\n";
|
||||
}
|
||||
# # Root Check
|
||||
# if( $< != 0 )
|
||||
# {
|
||||
# die "Not root, can't chroot or take other precautions, dying\n";
|
||||
# }
|
||||
|
||||
# The chroot section
|
||||
chdir($FindBin::Bin."/../jail") or die "Jail not made, see bin/makejail.sh";
|
||||
|
@ -224,11 +224,11 @@ use Storable qw/nfreeze/; nfreeze([]); #Preload Nfreeze since it's loaded on dem
|
|||
|
||||
chroot(".") or die $!;
|
||||
|
||||
# Here's where we actually drop our root privilege
|
||||
$)="$nobody_uid $nobody_uid";
|
||||
$(=$nobody_uid;
|
||||
$<=$>=$nobody_uid;
|
||||
POSIX::setgid($nobody_uid); #We just assume the uid is the same as the gid. Hot.
|
||||
# # Here's where we actually drop our root privilege
|
||||
# $)="$nobody_uid $nobody_uid";
|
||||
# $(=$nobody_uid;
|
||||
# $<=$>=$nobody_uid;
|
||||
# POSIX::setgid($nobody_uid); #We just assume the uid is the same as the gid. Hot.
|
||||
|
||||
|
||||
die "Failed to drop to nobody"
|
||||
|
|
Loading…
Add table
Reference in a new issue