Blame cjdns.genconf.patch
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
diff -up ./client/cjdroute2.c.genconf ./client/cjdroute2.c
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
--- ./client/cjdroute2.c.genconf 2020-06-23 08:37:44.000000000 -0400
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
+++ ./client/cjdroute2.c 2020-07-01 13:48:09.041257042 -0400
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
@@ -359,7 +359,7 @@ static int genconf(struct Allocator* all
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
if (Defined(android) || Defined(darwin)) {
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
printf(" { \"setuser\": 0 },\n");
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
} else {
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
- printf(" { \"setuser\": \"nobody\", \"keepNetAdmin\": 1 },\n");
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
+ printf(" { \"setuser\": \"cjdns\", \"keepNetAdmin\": 1 },\n");
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
}
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
printf("\n"
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
" // Chroot changes the filesystem root directory which cjdns sees, blocking it\n"
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
e8d4b4b |
@@ -372,7 +372,7 @@ static int genconf(struct Allocator* all
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
}
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
else {
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
printf(" // Default: enabled (using \"/var/run\")\n"
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
- " { \"chroot\": \"/var/run/\" },\n");
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
+ " { \"chroot\": \"/var/empty/cjdns\" },\n");
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
}
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
printf("\n"
|
|
![](https://seccdn.libravatar.org/avatar/386783d5cc573dde7b4924bf3538dd494d06f836902040e82e7dfeb832db033c?s=16&d=retro) |
2f8dfd1 |
" // Nofiles is a deprecated security feature which prevents cjdns from opening\n"
|