Conf: Make 'configure check' command restricted

While it does not directly change BIRD state, it can trigger reading
arbitrary files and eating significant memory.

1 files changed, 3 insertions, 0 deletions

diff --git a/sysdep/unix/main.c b/sysdep/unix/main.c
index 18cc091f..18fd4e44 100644
--- a/sysdep/unix/main.c
+++ b/sysdep/unix/main.c
@@ -282,6 +282,9 @@ cmd_read_config(const char *name)
 void
 cmd_check_config(const char *name)
 {
+  if (cli_access_restricted())
+    return;
+
   struct config *conf = cmd_read_config(name);
   if (!conf)
     return;