[master] cc27f9a Complain if -junix user and workuser have different login groups
Poul-Henning Kamp
phk at FreeBSD.org
Wed Apr 15 01:02:38 CEST 2015
commit cc27f9aa9bd4e7b50534b602282846d505583a28
Author: Poul-Henning Kamp <phk at FreeBSD.org>
Date: Tue Apr 14 21:57:25 2015 +0000
Complain if -junix user and workuser have different login groups
diff --git a/bin/varnishd/mgt/mgt_jail_unix.c b/bin/varnishd/mgt/mgt_jail_unix.c
index 7afc364..58eae00 100644
--- a/bin/varnishd/mgt/mgt_jail_unix.c
+++ b/bin/varnishd/mgt/mgt_jail_unix.c
@@ -160,6 +160,10 @@ vju_init(char **args)
if (vju_user == NULL && vju_getuid(JAIL_USER))
ARGV_ERR("Unix jail: %s user not found.\n", JAIL_USER);
+ if (vju_wrkuser != NULL && vju_wrkgid != vju_gid)
+ ARGV_ERR("Unix jail: %s and %s have different login groups\n",
+ vju_user, vju_wrkuser);
+
/* Do an explicit JAIL_MASTER_LOW */
AZ(setegid(vju_gid));
AZ(seteuid(vju_uid));
More information about the varnish-commit
mailing list