[master] cc27f9a Complain if -junix user and workuser have different login groups

Poul-Henning Kamp phk at FreeBSD.org
Wed Apr 15 01:02:38 CEST 2015


commit cc27f9aa9bd4e7b50534b602282846d505583a28
Author: Poul-Henning Kamp <phk at FreeBSD.org>
Date:   Tue Apr 14 21:57:25 2015 +0000

    Complain if -junix user and workuser have different login groups

diff --git a/bin/varnishd/mgt/mgt_jail_unix.c b/bin/varnishd/mgt/mgt_jail_unix.c
index 7afc364..58eae00 100644
--- a/bin/varnishd/mgt/mgt_jail_unix.c
+++ b/bin/varnishd/mgt/mgt_jail_unix.c
@@ -160,6 +160,10 @@ vju_init(char **args)
 	if (vju_user == NULL && vju_getuid(JAIL_USER))
 		ARGV_ERR("Unix jail: %s user not found.\n", JAIL_USER);
 
+	if (vju_wrkuser != NULL && vju_wrkgid != vju_gid)
+		ARGV_ERR("Unix jail: %s and %s have different login groups\n",
+		    vju_user, vju_wrkuser);
+
 	/* Do an explicit JAIL_MASTER_LOW */
 	AZ(setegid(vju_gid));
 	AZ(seteuid(vju_uid));



More information about the varnish-commit mailing list