use chdir() before calling chroot()

2013-07-29 11:05:16 +02:00
parent 9be164101d
commit 4e65be1211
2 changed files with 15 additions and 0 deletions
--- a/7
+++ b/7
@@ -1,3 +1,10 @@
+2013-07-29  Michael Scherer <misc-guest@alioth.debian.org>
+
+        * libmisc/root_flag.c: use chdir() before calling chroot() to
+	  avoid potential security issue (see
+	  http://www.bpfh.net/simes/computing/chroot-break.html)
+	  Closes: alioth#313962
+
 2013-07-29  Christian Perrier  <christian@perrier.eu.org>

        * man/useradd.xml: use "--home-dir" instead of "--home"