Option -t loads files after detaching from TTY and chroot() #20
Comments
ghost
assigned 
droe
added a commit
that referenced
this issue
Jan 30, 2014
Load the certificates from the directory given by -t into the certificate cache after preinit, but before dropping privileges. This fixes a number of issues, such as -t directory not being found after chroot()ing to a different root, -t directory inaccessible due to changing user with -u, and when using encrypted keys. This bug was introduced in 0675219 as a spurious part of fixing #5. Issue: #20, #19 Reported by: Miroslav Stampar
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Using -t fails under many circumstances, such as with encrypted keys in daemon mode, when chroot() is used, or when the user we drop privs to lacks the permissions to read the file.
-t should be rewritten to load the certificates into a list of cert_t before detaching from TTY; that list would need to be added to the certificate cache after detaching.
The text was updated successfully, but these errors were encountered: