-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 12/29/11 10:43, John Baldwin wrote: > On Thursday, December 29, 2011 1:26:17 pm Xin Li wrote: >> On 12/29/11 06:39, John Baldwin wrote: >>> Can you give some more details on why ftpd is triggering a >>> dlopen inside of the chroot? It would appear that that is >>> unrelated to helper programs (since setting a flag in libc in >>> ftpd can't possibly affect helper programs ability to use >>> dlopen() from within libc). >> >> Sure. That's because nsdispatch(3) would reload >> /etc/nsswitch.conf if it notices a change. After chroot() the >> file is considered as "chang"ed and thus it reloads the file as >> well as designated shared libraries. > > But ftpd has to be doing some operation that invokes an nss lookup > after entering the chroot for that to trigger, correct?
Oh ok, that was the built-in ls(1). Cheers, - -- Xin LI <[email protected]> https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk78tPEACgkQOfuToMruuMBq7QCfe2mWQDanxhZDDODYCo4Wqets +VMAn3kfObewKpZReZIucOIQIuj+OnWS =8h/i -----END PGP SIGNATURE----- _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[email protected]"
