search for: priv_allocset

...s" ]) ]) diff --git a/openbsd-compat/port-solaris.c b/openbsd-compat/port-solaris.c index 962cd16..0ba80c6 100644 --- a/openbsd-compat/port-solaris.c +++ b/openbsd-compat/port-solaris.c @@ -254,11 +254,17 @@ solaris_drop_privs_pinfo_net_fork_exec(void) * etc etc). */ - if ((pset = priv_allocset()) == NULL || - (npset = priv_allocset()) == NULL) + if ((pset = priv_allocset()) == NULL) fatal("priv_allocset: %s", strerror(errno)); +#if defined(HAVE_PRIV_BASICSET) + if ((npset = priv_allocset()) == NULL) + fatal("priv_allocset: %s", strerror(errno)); priv_basic...

On 2/17/16 3:02 PM, Carson Gaspar wrote: > > Sadly I'm hitting a different autoconf bug :-( I was being an idiot - configure was bombing out & I didn't notice (boy that openssl version error message is loooooong...) With Mr. Wilson's patch, I still get: "sandbox-solaris.c", line 22: #error: "--with-solaris-privs must be used with the Solaris sandbox"

On Tue, 16 Feb 2016, Jeff Wieland wrote: > The Solaris privilege code breaks building on Solaris 10. If > you let configure just do its thing, you get the following error > when compiling: > > "sandbox-solaris.c", line 22: #error: "--with-solaris-privs must be used with > the Solaris sandbox" > > So, I did add "--with-solaris-privs" to the

On Wed, 17 Feb 2016, Alex Wilson wrote: > On 2/17/16 2:04 PM, Alex Wilson wrote: > > I've attached a patch... > > > > Also at > > https://us-east.manta.joyent.com/arekinath/public/openssh-wip-fix-for-sol10-privs.patch > > If you are having trouble getting the patch out of the email. > > Also, as for Damien's patch, you will want to regenerate

..."PRIV_PROC_EXEC", + "PRIV_FILE_CHOWN", + "PRIV_PROC_SETID", + "PRIV_PROC_CHROOT", + "PRIV_NET_PRIVADDR", + "PRIV_FILE_DAC_READ", + "PRIV_FILE_DAC_WRITE", + NULL + }, **p; + priv_set_t *priv_set; + int ret; + + priv_set = priv_allocset(); + if (priv_set == NULL) { + i_warning("Can't allocate memory for privilege set: %m"); + return; + } + + priv_emptyset(priv_set); + + for (p = privs; *p != NULL; p++) { + ret = priv_addset(priv_set, *p); + if (ret != 0) { + i_warning("Can't drop %s from privilege set:...

https://bugzilla.mindrot.org/show_bug.cgi?id=2511 Bug ID: 2511 Summary: Drop fine-grained privileges on Illumos/Solaris Product: Portable OpenSSH Version: 7.1p1 Hardware: Other OS: Solaris Status: NEW Severity: enhancement Priority: P5 Component: sshd Assignee: unassigned-bugs