summaryrefslogtreecommitdiff
path: root/sshd.c
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2014-01-17 16:47:04 +1100
committerDamien Miller <djm@mindrot.org>2014-01-17 16:47:04 +1100
commit868ea1ea1c1bfdbee5dbad78f81999c5983ecf31 (patch)
treecd0d26dd73bc147951ef9a3aeb967448912e9c4f /sshd.c
parenta9d186a8b50d18869a10e9203abf71c83ddb1f79 (diff)
- (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c]
[sandbox-null.c sandbox-rlimit.c sandbox-seccomp-filter.c] [sandbox-systrace.c ssh-sandbox.h sshd.c] Support preauth sandboxing using the Capsicum API introduced in FreeBSD 10. Patch by Dag-Erling Smorgrav, updated by Loganaden Velvindron @ AfriNIC; ok dtucker@
Diffstat (limited to 'sshd.c')
-rw-r--r--sshd.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/sshd.c b/sshd.c
index 60b416e30..a5d4218b3 100644
--- a/sshd.c
+++ b/sshd.c
@@ -660,7 +660,7 @@ privsep_preauth(Authctxt *authctxt)
660 pmonitor->m_pkex = &xxx_kex; 660 pmonitor->m_pkex = &xxx_kex;
661 661
662 if (use_privsep == PRIVSEP_ON) 662 if (use_privsep == PRIVSEP_ON)
663 box = ssh_sandbox_init(); 663 box = ssh_sandbox_init(pmonitor);
664 pid = fork(); 664 pid = fork();
665 if (pid == -1) { 665 if (pid == -1) {
666 fatal("fork of unprivileged child failed"); 666 fatal("fork of unprivileged child failed");