tcpcrypt: patch tcpcryptd to run under uid 93 instead of 666

This commit is contained in:
Peter Simons 2013-09-11 17:24:22 +02:00
parent e761405c50
commit c749c24076
2 changed files with 32 additions and 3 deletions

View file

@ -0,0 +1,25 @@
From 4ef50d76a2da61be60fea448690e24f35bc37299 Mon Sep 17 00:00:00 2001
From: Peter Simons <simons@cryp.to>
Date: Wed, 11 Sep 2013 17:19:29 +0200
Subject: [PATCH] Run tcpcryptd under uid 93 instead of 666.
---
user/src/linux.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/user/src/linux.c b/user/src/linux.c
index b51e6b2..8199193 100644
--- a/user/src/linux.c
+++ b/user/src/linux.c
@@ -198,7 +198,7 @@ void linux_drop_privs(void)
cap_free(caps);
- if (setuid(666) == -1)
+ if (setuid(93) == -1)
err(1, "setuid()");
caps = cap_init();
--
1.8.3.4

View file

@ -1,4 +1,4 @@
{ fetchurl, stdenv
{ fetchurl, stdenv, autoconf, automake, libtool
, openssl, libcap, libnfnetlink, libnetfilter_queue
}:
@ -14,9 +14,13 @@ stdenv.mkDerivation rec {
name = "${name}.tar.gz";
};
buildInputs = [ openssl libcap libnfnetlink libnetfilter_queue ];
dontStrip = true;
preConfigure = "cd user";
buildInputs = [ autoconf automake libtool openssl libcap libnfnetlink libnetfilter_queue ];
patches = [ ./0001-Run-tcpcryptd-under-uid-93-instead-of-666.patch ];
preConfigure = "cd user; autoreconf -i";
meta = {
homepage = "http://tcpcrypt.org/";