SW/openwrt
2
0
Fork 0
forked from Ivasoft/openwrt
Code Pull Requests Activity

busybox: add check for capabilities file

Browse Source 
Similar to the previous commit adding a check to the init script of
umdns, do a similar change for sysntpd, just to be on the safe side.

Inspired-by: 520403cd49 ("umdns: add check for seccomp list")

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This commit is contained in:
Daniel Golle
2020-11-27 23:45:54 +00:00
parent 520403cd49
commit aa6fe00a48
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/utils/busybox/files/sysntpd
View File

@@ -55,7 +55,7 @@ start_ntpd_instance() {
procd_append_param command -p $peer
done
procd_set_param respawn
[ -x /sbin/ujail ] && {
[ -x /sbin/ujail -a -e /etc/capabilities/ntpd.json ] && {
procd_add_jail ntpd
procd_set_param capabilities /etc/capabilities/ntpd.json
procd_set_param user ntp