Hi Lucas,
thanks for you bug report! This bug should be fixed with 1.2-4 which is
waiting for sponsorship on mentors.debian.net:
- URL: http://mentors.debian.net/debian/pool/main/j/jaranalyzer
- Source repository: deb-src http://mentors.debian.net/debian unstable
main contrib non-free
- dget
Hi Cyril,
thank you very much for pointing this error out.
A patched package has been created and will be uploaded soon.
Florian
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
--- syslog-ng-2.0.9.orig/src/main.c
+++ syslog-ng-2.0.9/src/main.c
@@ -275,7 +275,15 @@
{
if (chroot_dir)
{
- if (chroot(chroot_dir) < 0)
+ if (chdir(chroot_dir) <0)
+{
+ msg_error("Error during chdir() before chroot()",
+evt_tag_errno(EVT_TA
Package: syslog-ng
Version: 2.0.9-1ubuntu3
Severity: grave
Tags: security
Justification: user security hole
I have not had the time to analyze all of syslog-ng code. But by reading
the code section near the chroot call and looking at strace results I
believe that syslog-ng does not chdir to the ch
Package: makejail
Version: 0.0.5-7
Severity: serious
makejail defines as a default:
self.pathToLdConfig="/sbin/ldconfig"
On Ubuntu this is not the real ldconfig but a bash shell script.
Therefore the config should point to
self.pathToLdConfig="/sbin/ldconfig.real". Otherwise a bash shell
will b
5 matches
Mail list logo