diff options
author | rwatson <rwatson@FreeBSD.org> | 2000-02-09 03:32:11 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2000-02-09 03:32:11 +0000 |
commit | d57c73c131db959506cbee635ad78b3e45fa8a7b (patch) | |
tree | be0b84dba78df3d7683dd99a01abab4f81a70f73 /sys/kern/tty_pty.c | |
parent | 05934f97678ef7d5925562d6cae001d60b9909bc (diff) | |
download | FreeBSD-src-d57c73c131db959506cbee635ad78b3e45fa8a7b.zip FreeBSD-src-d57c73c131db959506cbee635ad78b3e45fa8a7b.tar.gz |
Correct an oversight in jail() that allowed processes in jail to access
ptys in ways that might be unethical, especially towards processes not in
jail, or in other jails.
Submitted by: phk
Reviewed by: rwatson
Approved by: jkh
Diffstat (limited to 'sys/kern/tty_pty.c')
-rw-r--r-- | sys/kern/tty_pty.c | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/sys/kern/tty_pty.c b/sys/kern/tty_pty.c index 539ee0b..14269c1 100644 --- a/sys/kern/tty_pty.c +++ b/sys/kern/tty_pty.c @@ -118,6 +118,7 @@ struct pt_ioctl { u_char pt_ucntl; struct tty pt_tty; dev_t devs, devc; + struct prison *pt_prison; }; #define PF_PKT 0x08 /* packet mode */ @@ -170,6 +171,7 @@ ptsopen(dev, flag, devtype, p) int error; int minr; dev_t nextdev; + struct pt_ioctl *pti; /* * XXX: Gross hack for DEVFS: @@ -187,6 +189,7 @@ ptsopen(dev, flag, devtype, p) ptyinit(minor(dev)); if (!dev->si_drv1) return(ENXIO); + pti = dev->si_drv1; tp = dev->si_tty; if ((tp->t_state & TS_ISOPEN) == 0) { ttychars(tp); /* Set up default chars */ @@ -195,8 +198,11 @@ ptsopen(dev, flag, devtype, p) tp->t_lflag = TTYDEF_LFLAG; tp->t_cflag = TTYDEF_CFLAG; tp->t_ispeed = tp->t_ospeed = TTYDEF_SPEED; - } else if (tp->t_state & TS_XCLUDE && suser(p)) + } else if (tp->t_state & TS_XCLUDE && suser(p)) { return (EBUSY); + } else if (pti->pt_prison != p->p_prison) { + return (EBUSY); + } if (tp->t_oproc) /* Ctrlr still around. */ (void)(*linesw[tp->t_line].l_modem)(tp, 1); while ((tp->t_state & TS_CARR_ON) == 0) { @@ -354,6 +360,7 @@ ptcopen(dev, flag, devtype, p) (void)(*linesw[tp->t_line].l_modem)(tp, 1); tp->t_lflag &= ~EXTPROC; pti = dev->si_drv1; + pti->pt_prison = p->p_prison; pti->pt_flags = 0; pti->pt_send = 0; pti->pt_ucntl = 0; |