From: Pieter Lexis <pieter.lexis@powerdns.com>
Date: Tue, 16 Feb 2016 11:27:10 +0000 (+0100)
Subject: pdnsutil: support chroot
X-Git-Tag: dnsdist-1.0.0-beta1~110^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c2e972e8f487ef1224edff429c820ed499c33ab6;p=thirdparty%2Fpdns.git

pdnsutil: support chroot

Closes #964
---

diff --git a/pdns/pdnsutil.cc b/pdns/pdnsutil.cc
index 9e59fd4ec3..2116c3ff40 100644
--- a/pdns/pdnsutil.cc
+++ b/pdns/pdnsutil.cc
@@ -118,11 +118,21 @@ void loadMainConfig(const std::string& configdir)
   ::arg().set("soa-retry-default","Default SOA retry")="3600";
   ::arg().set("soa-expire-default","Default SOA expire")="604800";
   ::arg().set("soa-minimum-ttl","Default SOA minimum ttl")="3600";    
+  ::arg().set("chroot","Switch to this chroot jail")="";
 
   // Keep this line below all ::arg().set() statements
   if (! ::arg().laxFile(configname.c_str()))
     cerr<<"Warning: unable to read configuration file '"<<configname<<"'."<<endl;
 
+  seedRandom(::arg()["entropy-source"]);
+
+  if (!::arg()["chroot"].empty()) {
+    if (chroot(::arg()["chroot"].c_str())<0 || chdir("/") < 0) {
+      cerr<<"Unable to chroot to '"+::arg()["chroot"]+"': "<<strerror (errno)<<endl;
+      exit(1);
+    }
+  }
+
   UeberBackend::go();
 }
 
@@ -1892,8 +1902,6 @@ try
 
 loadMainConfig(g_vm["config-dir"].as<string>());
 
-seedRandom(::arg()["entropy-source"]);
-
 #ifdef HAVE_LIBSODIUM
   if (sodium_init() == -1) {
     cerr<<"Unable to initialize sodium crypto library"<<endl;