mirrors/zapret
0
0
Fork 0
mirror of https://github.com/bol-van/zapret.git synced 2025-06-29 18:21:16 +00:00
Code

nfqws,tpws: check list files accessibility with dropped privs in --dry-run mode

Browse Source
This commit is contained in:
bol-van 2025-05-29 15:43:27 +03:00
parent 38a3833351
commit fd698d801b
3 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
docs/changes.txt
View File

@ -506,5 +506,6 @@ blockcheck: report test function and domain every test
v71.1
nfqws,tpws: much faster ipset implementation. move from hash to avl tree
nfqws,tpws: check list files accessibility with dropped privs in --dry-run mode
install_easy: stop if running embedded release on traditional linux system (some files missing)
install_bin: add "read elf" arch detection method

14
nfq/nfqws.c
View File

@ -3094,6 +3094,20 @@ int main(int argc, char **argv)
if (bDry)
{
#ifndef __CYGWIN__
if (params.droproot)
{
if (!droproot(params.uid,params.gid,params.gid_count))
exit_clean(1);
#ifdef __linux__
if (!dropcaps())
exit_clean(1);
#endif
print_id();
if (!test_list_files())
exit_clean(1);
}
#endif
DLOG_CONDUP("command line parameters verified\n");
exit_clean(0);
}

12
tpws/tpws.c
View File

@ -1715,6 +1715,18 @@ void parse_params(int argc, char *argv[])
#endif
if (bDry)
{
if (params.droproot)
{
if (!droproot(params.uid,params.gid,params.gid_count))
exit_clean(1);
#ifdef __linux__
if (!dropcaps())
exit_clean(1);
#endif
print_id();
if (!test_list_files())
exit_clean(1);
}
DLOG_CONDUP("command line parameters verified\n");
exit_clean(0);
}