Do a chdir() to the sandbox dir to ensure CWD is within sandbox.

diff --git a/servers/slapd/main.c b/servers/slapd/main.c
index 0fc8b3072c552b10e3532f79c95ded24f9f0d113..ccf2f93c0418ab679332709ba215feedff430962 100644 (file)
--- a/servers/slapd/main.c
+++ b/servers/slapd/main.c
@@ -301,7 +301,7 @@ int main( int argc, char **argv )
        }
 
 #if defined(HAVE_CHROOT)
-       if ( sandbox && chroot( sandbox ) ) {
+       if ( sandbox && chdir( sandbox ) && chroot( sandbox ) ) {
                perror("chroot");
                rc = 1;
                goto stop;