Author: jamie
Date: Thu Aug 27 17:04:55 2020
New Revision: 364874
URL: https://svnweb.freebsd.org/changeset/base/364874

Log:
  Disregard jails in jail.conf that have bad parameters (parameter/variable
  clash, or redefining name/jid).  The current behvaior, of merely warning
  and moving on, can lead to unexpected behavior when a jail is created
  without the offending parameter defined at all.

Modified:
  head/usr.sbin/jail/config.c

Modified: head/usr.sbin/jail/config.c
==============================================================================
--- head/usr.sbin/jail/config.c Thu Aug 27 16:36:07 2020        (r364873)
+++ head/usr.sbin/jail/config.c Thu Aug 27 17:04:55 2020        (r364874)
@@ -369,11 +369,13 @@ add_param(struct cfjail *j, const struct cfparam *p, e
                if ((flags ^ dp->flags) & PF_VAR) {
                        jail_warnx(j, "variable \"$%s\" cannot have the same "
                            "name as a parameter.", name);
+                       j->flags |= JF_FAILED;
                        return;
                }
                if (dp->flags & PF_IMMUTABLE) {
                        jail_warnx(j, "cannot redefine parameter \"%s\".",
                            dp->name);
+                       j->flags |= JF_FAILED;
                        return;
                }
                if (strcmp(dp->name, name)) {
@@ -405,6 +407,7 @@ add_param(struct cfjail *j, const struct cfparam *p, e
                                                    "cannot have the same "
                                                    "name as a parameter.",
                                                    name);
+                                               j->flags |= JF_FAILED;
                                                return;
                                        }
                                        j->intparams[ipnum] = np;
_______________________________________________
svn-src-head@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"

Reply via email to