svn commit: r228843 - head/contrib/telnet/libtelnet
head/crypto/heimdal/appl/telnet/libtelnet head/include
head/lib/libc/gen head/lib/libc/iconv head/lib/libc/include
head/lib/libc/net head/libexec...
John Baldwin
jhb at freebsd.org
Thu Dec 29 18:43:05 UTC 2011
On Thursday, December 29, 2011 1:26:17 pm Xin Li wrote:
> On 12/29/11 06:39, John Baldwin wrote:
> > Can you give some more details on why ftpd is triggering a dlopen
> > inside of the chroot? It would appear that that is unrelated to
> > helper programs (since setting a flag in libc in ftpd can't
> > possibly affect helper programs ability to use dlopen() from within
> > libc).
>
> Sure. That's because nsdispatch(3) would reload /etc/nsswitch.conf if
> it notices a change. After chroot() the file is considered as
> "chang"ed and thus it reloads the file as well as designated shared
> libraries.
But ftpd has to be doing some operation that invokes an nss lookup after
entering the chroot for that to trigger, correct?
--
John Baldwin
More information about the freebsd-security
mailing list