diff options
author | Damien Miller <djm@mindrot.org> | 2014-01-17 16:47:04 +1100 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2014-01-17 16:47:04 +1100 |
commit | 868ea1ea1c1bfdbee5dbad78f81999c5983ecf31 (patch) | |
tree | cd0d26dd73bc147951ef9a3aeb967448912e9c4f /sshd.c | |
parent | a9d186a8b50d18869a10e9203abf71c83ddb1f79 (diff) |
- (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c]
[sandbox-null.c sandbox-rlimit.c sandbox-seccomp-filter.c]
[sandbox-systrace.c ssh-sandbox.h sshd.c] Support preauth sandboxing
using the Capsicum API introduced in FreeBSD 10. Patch by Dag-Erling
Smorgrav, updated by Loganaden Velvindron @ AfriNIC; ok dtucker@
Diffstat (limited to 'sshd.c')
-rw-r--r-- | sshd.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -660,7 +660,7 @@ privsep_preauth(Authctxt *authctxt) | |||
660 | pmonitor->m_pkex = &xxx_kex; | 660 | pmonitor->m_pkex = &xxx_kex; |
661 | 661 | ||
662 | if (use_privsep == PRIVSEP_ON) | 662 | if (use_privsep == PRIVSEP_ON) |
663 | box = ssh_sandbox_init(); | 663 | box = ssh_sandbox_init(pmonitor); |
664 | pid = fork(); | 664 | pid = fork(); |
665 | if (pid == -1) { | 665 | if (pid == -1) { |
666 | fatal("fork of unprivileged child failed"); | 666 | fatal("fork of unprivileged child failed"); |