Tags: patch
Hello!
Here is a patch to implement using the chroot by default.
Take care,
--
Kees Cook @outflux.net
diff -u up-imapproxy-1.2.4/debian/rules up-imapproxy-1.2.4/debian/rules
--- up-imapproxy-1.2.4/debian/rules
+++ up-imapproxy-1.2.4/debian/rules
@@ -67,6 +67,7 @@
$(MAKE) install prefix=$(CURDIR)/debian/imapproxy/usr
mv debian/imapproxy/usr/sbin/in.imapproxyd \
debian/imapproxy/usr/sbin/imapproxyd
+ mkdir -p debian/imapproxy/var/lib/imapproxy/chroot
# Build architecture-independent files here.
binary-indep: build install
diff -u up-imapproxy-1.2.4/debian/imapproxy.dirs up-imapproxy-1.2.4/debian/imapproxy.dirs
--- up-imapproxy-1.2.4/debian/imapproxy.dirs
+++ up-imapproxy-1.2.4/debian/imapproxy.dirs
@@ -6,0 +7 @@
+var/lib/imapproxy/chroot
diff -u up-imapproxy-1.2.4/debian/imapproxy.postinst up-imapproxy-1.2.4/debian/imapproxy.postinst
--- up-imapproxy-1.2.4/debian/imapproxy.postinst
+++ up-imapproxy-1.2.4/debian/imapproxy.postinst
@@ -29,10 +29,11 @@
DESTFILE=/etc/imapproxy.conf
CFGFILE=imapproxy.conf
-PARAMS="server_hostname proc_username proc_groupname"
+PARAMS="server_hostname proc_username proc_groupname chroot_directory"
server_hostname="localhost"
proc_username="nobody"
proc_groupname="nogroup"
+chroot_directory="/var/lib/imapproxy/chroot"
case "$1" in
configure)
@@ -51,7 +52,7 @@
open(CFG,">$DESTFILE");
my %params = map { \$_ => "" } split(/\s/,\$ENV{'PARAMS'});
while (<INPUT>) {
- m/^(\w+)/;
+ m/^#?(\w+)/;
if( (\$1) and exists \$params{\$1} ){ print CFG "\$1 \$ENV{\$1}\n"; }
else { print CFG \$_; }
}