[PATCHES] Fix build errors and sandbox bugs in the Solaris port

Nils Goroll slink at schokola.de
Thu Aug 2 20:06:57 CEST 2012


Hi phk,

testing the new sandbox code I noticed that the tmpdir should be owned by
mgt_param.uid, otherwise unlinking the compiled .so will fail when
setuid(mgt_param.uid) succeeds.

Nils

On 08/ 2/12 06:53 PM, Nils Goroll wrote:
> Hi Phk,
> 
>> I have committed part 1, and generalized the idea in part 3 but
>> not attempted to implement the solaris sandbox with it, but I
>> hope it makes it easier to do so for you guys.
> 
> Thanks for the refactoring, as always, your version of the same idea is cleaner. :)
> 
> Here's a patch for the solaris sandbox, which also fixes a nit in mgt_sandbox.c
> 
> Thanks, Nils
> 
> 
> 
> _______________________________________________
> varnish-dev mailing list
> varnish-dev at varnish-cache.org
> https://www.varnish-cache.org/lists/mailman/listinfo/varnish-dev
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 0002-give-away-the-tmpdir-to-the-privilege-seperation-use.patch
URL: <https://www.varnish-cache.org/lists/pipermail/varnish-dev/attachments/20120802/de87c2ac/attachment.ksh>


More information about the varnish-dev mailing list