From: Ondrej Zajicek <santiago@crfreenet.org>
Date: Wed, 9 Nov 2022 21:02:46 +0000 (+0100)
Subject: Conf: Make 'configure check' command restricted
X-Git-Tag: v2.0.11~13
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=bbac9ca958c73fd08b4691ea40067d1cc3ac275a;p=thirdparty%2Fbird.git

Conf: Make 'configure check' command restricted

While it does not directly change BIRD state, it can trigger reading
arbitrary files and eating significant memory.
---

diff --git a/sysdep/unix/main.c b/sysdep/unix/main.c
index 18cc091ff..18fd4e449 100644
--- a/sysdep/unix/main.c
+++ b/sysdep/unix/main.c
@@ -282,6 +282,9 @@ cmd_read_config(const char *name)
 void
 cmd_check_config(const char *name)
 {
+  if (cli_access_restricted())
+    return;
+
   struct config *conf = cmd_read_config(name);
   if (!conf)
     return;