chroot and setuid [Re: OpenBSD work on Tcpdump privilege separation]

[Pekka Savola <pekkas () netcore fi>]

Hi,

This is my view on how chroot should be done (note: I haven't bothered 
to add a cmd-line argument, if you think that should be added, it's 
trivial), and the trivial setuid patch as well.

This doesn't try to automatically create directories or whatever, but 
relies on the compile time option (e.g. /var/empty) but is IMHO better 
in some sense.

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Attachment: tcpdump-setuid.patch
Description:

Attachment: tcpdump-chroot.patch
Description: