Conf: Make 'configure check' command restricted

While it does not directly change BIRD state, it can trigger reading
arbitrary files and eating significant memory.

diff --git a/sysdep/unix/main.c b/sysdep/unix/main.c
index 18cc091ff3f1bbcd1cc3e182dcf27e65970c43cd..18fd4e4498716d362b09ce34b86a47f1aceb1c8d 100644 (file)
--- a/sysdep/unix/main.c
+++ b/sysdep/unix/main.c
@@ -282,6 +282,9 @@ cmd_read_config(const char *name)
 void
 cmd_check_config(const char *name)
 {
+  if (cli_access_restricted())
+    return;
+
   struct config *conf = cmd_read_config(name);
   if (!conf)
     return;