diff options
author | Mike Frysinger <vapier@gentoo.org> | 2009-04-01 06:59:20 -0400 |
---|---|---|
committer | Mike Frysinger <vapier@gentoo.org> | 2009-04-05 03:54:02 -0400 |
commit | 60c1345bfa4f5e37adade3cfbb8ae8834475af3b (patch) | |
tree | fa089d1b1da08a20f792c4bba7fb4be8b384b811 /libsandbox/libsandbox.c | |
parent | libsandbox: enable tracing for multiple personalities (diff) | |
download | sandbox-60c1345bfa4f5e37adade3cfbb8ae8834475af3b.tar.gz sandbox-60c1345bfa4f5e37adade3cfbb8ae8834475af3b.tar.bz2 sandbox-60c1345bfa4f5e37adade3cfbb8ae8834475af3b.zip |
libsandbox: tweak /proc/.../cmdline check for hardened
Some hardened systems disable /proc/#/ access when the process in question
is not owned by the current user.
URL: http://bugs.gentoo.org/264476
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Reported-by: Andreas Westin <forsaken@forsaken.se>
Diffstat (limited to 'libsandbox/libsandbox.c')
-rw-r--r-- | libsandbox/libsandbox.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libsandbox/libsandbox.c b/libsandbox/libsandbox.c index f3d1d3a..d782d56 100644 --- a/libsandbox/libsandbox.c +++ b/libsandbox/libsandbox.c @@ -125,7 +125,7 @@ static const char *sb_get_fd_dir(void) static const char *sb_get_cmdline(pid_t pid) { -#if !defined(SANDBOX_PROC_1_CMDLINE) +#if !defined(SANDBOX_PROC_1_CMDLINE) && !defined(SANDBOX_PROC_SELF_CMDLINE) && !defined(SANDBOX_PROC_dd_CMDLINE) # error "how do i access a proc's cmdline ?" #endif static char path[256]; |