[PATCH 2/2] daemon: Verify base-path and interpolated-path early
From: Johannes Sixt <hidden>
Date: 2016-06-15 22:44:17
Subsystem:
the rest · Maintainer:
Linus Torvalds
Any request to the daemon would fail if either interpolated-path or base-path (if specified) would not be absolute. Hence, we can check those paths for validity upfront and not start the daemon at all if the paths are invalid. Additionally, we now check that the base-path is an existing directory. Signed-off-by: Johannes Sixt <redacted> --- daemon.c | 24 +++++++++++++----------- 1 files changed, 13 insertions(+), 11 deletions(-)
diff --git a/daemon.c b/daemon.c
index dd0177f..64c7fff 100644
--- a/daemon.c
+++ b/daemon.c@@ -220,12 +220,6 @@ static char *path_ok(struct interp *itable) } } else if (interpolated_path && saw_extended_args) { - if (*dir != '/') { - /* Allow only absolute */ - logerror("'%s': Non-absolute path denied (interpolated-path active)", dir); - return NULL; - } - interpolate(interp_path, PATH_MAX, interpolated_path, interp_table, ARRAY_SIZE(interp_table)); loginfo("Interpolated dir '%s'", interp_path);
@@ -233,11 +227,6 @@ static char *path_ok(struct interp *itable) dir = interp_path; } else if (base_path) { - if (*dir != '/') { - /* Allow only absolute */ - logerror("'%s': Non-absolute path denied (base-path active)", dir); - return NULL; - } snprintf(rpath, PATH_MAX, "%s%s", base_path, dir); dir = rpath; }
@@ -1184,6 +1173,19 @@ int main(int argc, char **argv) if (strict_paths && (!ok_paths || !*ok_paths)) die("option --strict-paths requires a whitelist"); + if (base_path) { + struct stat st; + + if (!is_absolute_path(base_path)) + die("base-path must be absolute"); + if (stat(base_path, &st) || !S_ISDIR(st.st_mode)) + die("base-path '%s' does not exist or " + "is not a directory", base_path); + } + + if (interpolated_path && !is_absolute_path(interpolated_path)) + die("interpolated-path must be absolute"); + if (inetd_mode) { struct sockaddr_storage ss; struct sockaddr *peer = (struct sockaddr *)&ss;
--
1.5.4.3.229.g5c72