Michael Butler <i...@protected-networks.net> writes:
> Dag-Erling Smørgrav <d...@freebsd.org> writes:
> > Is /etc/localtime a symlink or a file?  If a symlink, where does it
> > point?
> imb@d5540:/home/imb> ll /etc/localtime
> lrwxr-xr-x  1 root wheel 36 Aug 29 09:24 /etc/localtime@ ->
> /usr/share/zoneinfo/America/New_York
> > Is the TZ variable set in your environment?  If yes, what is it set to?
> TZ is not set in either privileged or unprivileged environments.

OK, the upstream code is setting TZLOAD_FROMENV unconditionally even
when not using the environment variable.  That is causing us to consider
/etc/localtime as untrusted, and then reject it because it is not
relative to /usr/share/zoneinfo.  Unfortunately this fell between the
cracks of my test cases (it's a combination of the thin_jail and setugid
cases).  I'll submit a patch upstream and fix it locally.

DES
-- 
Dag-Erling Smørgrav - d...@freebsd.org

Reply via email to