diff options
| author | Ondrej Zajicek <santiago@crfreenet.org> | 2022-11-09 22:02:46 +0100 |
|---|---|---|
| committer | Ondrej Zajicek <santiago@crfreenet.org> | 2022-11-09 22:02:46 +0100 |
| commit | bbac9ca958c73fd08b4691ea40067d1cc3ac275a (patch) | |
| tree | df62f4b2e44f24c213a718c00ab2398174552f22 /sysdep | |
| parent | 371eb49043d225d2bab8149187b813a14b4b86d2 (diff) | |
Conf: Make 'configure check' command restricted
While it does not directly change BIRD state, it can trigger reading
arbitrary files and eating significant memory.
Diffstat (limited to 'sysdep')
| -rw-r--r-- | sysdep/unix/main.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sysdep/unix/main.c b/sysdep/unix/main.c index 18cc091f..18fd4e44 100644 --- a/sysdep/unix/main.c +++ b/sysdep/unix/main.c @@ -282,6 +282,9 @@ cmd_read_config(const char *name) void cmd_check_config(const char *name) { + if (cli_access_restricted()) + return; + struct config *conf = cmd_read_config(name); if (!conf) return; |