On Thursday, December 29, 2011 1:26:17 pm Xin Li wrote:
> On 12/29/11 06:39, John Baldwin wrote:
> > Can you give some more details on why ftpd is triggering a dlopen
> > inside of the chroot?  It would appear that that is unrelated to
> > helper programs (since setting a flag in libc in ftpd can't
> > possibly affect helper programs ability to use dlopen() from within
> > libc).
> 
> Sure.  That's because nsdispatch(3) would reload /etc/nsswitch.conf if
> it notices a change.  After chroot() the file is considered as
> "chang"ed and thus it reloads the file as well as designated shared
> libraries.

But ftpd has to be doing some operation that invokes an nss lookup after
entering the chroot for that to trigger, correct?

-- 
John Baldwin
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"

Reply via email to